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ABSTRACT 


The Joint Deployment System (JDS) forms the juncticr 
among deliberate pianning, time-sensitive planning, and «he 
deployment cf forces. The WWMCCS Intercomputer Network 
(WIN) sSuprlies the necessary interconnectivity among =he 
joint deplicymen+ community computer systems. In January 
1982, the WHMCCS Intecrmation System (WIS) modarnization 
program was launched with objectives including =he mecd¢erni- 
Meeaen CL WHMCCCS nardware and software and the transfer 
from the present WWMCCS network system to the Detense Dar 
Network (DDN). Because cf proven WIN unreliability, the JDS 


:aque software development to Ssupovlement 


application softwars, integrated with the 
ecwork reliability and survivability 

a the prisent C3 systam. This thesis dénens- 
mae ece that the eGta. implementation of the WI V 
a (eee eae 1905S sane Sst=e-unique applications, stand- 
axdized rgrocedures fcr softwar2 develonoment, updated 


mmewal= technoicey, end a muiti-level security systen. 
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I. INTRODUCTION 


A. PURPOSE 


In the late seventies time-irame, tne Joint Deploymen= 
Agency (JDA) experienced unsatisfactory WWMCCS Intercomputer 
Netwerk (WIN) reliabilizy for large data transfers to remote 
Peeges. The WHMCCS Irformation System (WIS) nodernization 
program addresses the WIN deficiency issues of dower 
supplies and nulti-levsl security and proposes changes in 
femeeanCCS network te allow greater interconnectivity anong 
Sec eS . 

This thesis attempts to assass th2 WIS modarnizaticn 
Maoaectc Ch large software systems in the WWMCCS community, in 
Peete cular, the Joint Deployment System (JDS). Specific 


@geticiencies aréas or hardware and softwars, surviv- 


}-4 
®) 


ability, and management will be addtessed and planned 
imprcevements analyzed. The mcdernization program shculd 
SMpEOVS computer inteéercennectivity among the joint deplov- 
Teen ccumunity in the future, but «he ute ee 


Teoeeons wll 


(l 
= 
O 
Qu 
pe 


software and WWMCCS standard softwares 
Beevece the cperational reliability neces 
Miche 2jtetim. With the conglomezatio 
toe Defense Data Network during the 198 
Beets) ths fucure WIS support of these cso 
applicaticne and the improved WwWMCCS Network, the siid't 

deplcyment ccmmunity may 2xperience a nore reliable svsten 


Gee CCMpPUuTer resource sharing. 





BE. MILITARY C3 NETWORK 


fhe WOErtdwide Milatary Command and Control Syst: 
(WWMCCS) cf the United States centers around the needs cf 
miem National Command Authority (NCA). A Command, Contrcl 
and Ccmmunications (C3) process cén bs considered an uncer- 


tanity reducing technigue which aids th= ccmmander in the 


@emcercl of ferces. @A good C3 systsm must permicz the secure 
paeetamely flow cf infcrmation to points both insid= and 
outside the Department of Defense (DOD). This flow must 
mest Gguraing all scenarios -- day-to-day activities, criss¢s 
Senventional conflict, and nuclear wart. The C3 system is a 
major ingredient to the U.S. national goal of deterrence ci 


fem LE Ref. Is p. 53] 


W) 


Using WWMCCS, «he NCA communicates its d 
meeroyment of military forces to the Joint Chists of Stati 
Meo. in Short, the JCS mission can be def 
exeecuzion of national decisions. This ai 
by various ccmmunications networks and comma 
Stree ecus, cne of the nese central being the Joint 
System (JCS) which provides a bridges bezw2en the de 
Peaanang precess and tine-sensicive slaaning and =x 
Geonmnecctivity for these systems is provided by the Naticn 
fmitecary CoemMand System (NMCS) which consists of thres 
command centers: the National Military Command Center 
ie cy, <~ne Alternate National Military Command Center 
(ANMCC), and the Naticnal Emergency Airtberne Ccmmand YCocs* 


— 


(NEACE). Also included in the NMCS are the various 


personnel and @quipment necessary for adequate conercl of 
Benmces. fRef. 2:3: p. 36] 

The Defensa Communicaticns System (DCS) is tne founda- 
mon LCL worldwide cemmunications during both peacetine and 


. 
7 


Crisis situations. The DCS covers the United Sta P 
° 


Re, and che Pacific area with networks such as 7h: 


a 





Auzomated Vcice Netwerk (AUTOVON), the Automated Secure 
Voice Network(AUTOSEVCCOM), and the Automated Digital 

Network (AUTODIN). WWMCCS was established in 1962 and 
Supports the command functions of the NCA by supplying 


—_ a+ 


information through an online data pase system. Als~hough 


if 


communicaticns is a fundamental aspect of a C3 systen, 
Simply having gocd communications does not equate to an 
adequate command, centrol, and communications system. The 
Beemer Dalance of command and contezsl and communications, in 
Omeon with fcrces, results in maximum force ,etfiectiveness. 
fRef. 3: pe. 40] 
Go @whCCs 

WWMCCS evolved in the early 1960's from a loosely knit 
congicmeraticn of abcut 158 computsr systems, using 30 


different software systems, and operating at 81 locaticns: 
feeeeeecving the JCS, Unified and Specified commands, and *he 
Service ccmmands. The majority of these systems were deval-~ 
oped independently, consaquently the lack of 


Srtercperability within the total system proved detrimnertal 


ct 


Smee = Meeting the NCA requizremants for intercommunications 


Pimemog Sites. AS the ccncepts of C3 grew, additional 
g p g 


W 
equirements ware demanded of z=he system; these r 


) 

WO 
- 
4 

r{ 

ip 

| 

i 

>, 

ct 

if 


Werte wet sporadically, and by 1970, <hn¢r2 was an 


iD 
{ts 
«D 
La 
at 


Meec, fOr a WWMCCS moderniza*icn erftort. In June 


O 

aa) 

aad 

\O 

~J 

Ce 
= 


the WWMCCS Automated Data Processing (ADP) Program w 


rey) 
7) 


Meeceated tc improve WNWMCCS support. The program's 
Luded: 


Gimenecwier son OLecOoOS- through Sstardardized hardware 


ve) 
O 
ey 
[= 
YU) 


and software 
(2) development of a viable Data Bas? Managemzren= 
System (LBMS) for data retrieval 


(3) standardization of data formats 


10 





(Uyercenagalizat=cn of manag2ment activati 


Pe 2] 
Preetcreco ois erfert, the WWMCCS program had no central 


iD 
in 
i 
rg 
iD 
th 

t 


authcrity fer its budgeting or management. Numercus organi- 
zations were responsible for the various aspects of the 
Seegram. fC=> instance, the WWHCCS Council provid 

guidance for davelopment and operation of the system; the 
JCS evaluated WWMCCS*' overall effectrivene 


‘n 
W) 
<i 
a) 
if 
}-4 


Assistant Secretaries of Defense provided 

design and develcpment, warning and intelligence 
and ALCP procurements; and each Sservic2 was responsible 
fundirg its equipment acquisition and software dev 

The WWMCCS System Engineering Office (NSEO), a 
crganizaticn in the Cefense Communications Aqéency 
Seganazed in the mid 1970's to coordinate the ge 
euganeering of WWMCCS. One of the biggest disadvantages to 
@iemnwiCCS ménagqement structur2 was that the Directon. (Cc, 
meee bl. Tector, WWMCCS Engineering, reported *0 =wo croeniza- 
tionss the Assistant Secretary or vefer 


S 
Crganization and technical matters and the chairman cf 


qf 

i 

+ 
1s 


O 
Kh 


Meomic: GCCtLine, opveraticnal policies, and validaticn 


e ’ = 
<= v“ha + 
ae ad —_ 


requirements. This, compounded 


x 


a 
mete o>, OGRA, fad ne elthority for the budgeting er nanage- 
fem, CL the WWMCCS prcgram, precluded <he s 

coordination of WWMCCS ADP development etfo 

8] 

The WHMCCS ADP Picgram also outlined a set of weli- 
defined requirements which includéd <=hs capability =o 
process large amcunts of data within a reasonable time, 
reliaktility greater than 99%, user and maintenance friendli- 
ness, and small physical space and personnel requirements. 
{Ref. 6: pe. 22] 
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The WWMCCS functicns which sup 


eae Le 
Q) O 
a 
ct 
Ue | 
?D 
t- 
fa 
cf 
iD 
Qu 
| 
+? 
Nn 
U4 
j 4 


grouped to allow each family of fu 
dently defined and iaplemented. Interfa 
functional families area well defined. One of the hasics of 
the WWMCCS architecture is the concep= o 
functional families which support the 
and Specified Commands. They are: 

(1) Resource and Unit enema (PUM) 

iyeecorvenetonal Planning and Sxecitetion (CPE) 

(3) Nuclear Flanning and Execution {N£E) 

(4) Tactical Warning/Attack Assessment and Sface 

Becetscmtlw/ AN and SD) > { Ref. 73 Dp. ti] 

fpeaddit2on, WWMCCS ADP is divaded into 
ties. Category A includes the WWMCCS standard -wa 
Saemucne Of WNMCCS ACP which principally suppcecrts ‘the 
Semm@and and control reguizements. Category 3 ils t14at soe 
Wale Which is unique to a particular act 
C erccmpasses the newly emerging systems. [Rer. 8: pe 
Pemmices grow, Utilization of thaeWMMNCCS Beteccec 

Network (WIN) increased. The network was initiatel as 
Bee-Otyps at three sites and from 1977 to 1983 the 
WIN sites jumped frem six to twenty-three, with fu 
PWencUally including all -*WWMCCS sites. Commonly us 
eens include: 

(1) Maintenance of status and loceticn of forces and 

rescurces 


(2epbatinung) fOr EOECe NObLeization and deplcymencts 


c 


3 
(Sjeeeee patazicn of the Single Integra 
Elan (SIOp) 


(4) estimating and monitoring Navy fleer fuel 


2d Operations 


Gena unet 2 On 
(Sees sce ing 2m preepatreaecion and processing cf 
AUTODIN messages {Ref. 9: p. 5] 
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The utilization cf the Joint Deployment System (JDS) 
@emeerabuted to the increased activity on the WWMCCS network. 
AS a ftIimary function, the JDS maintains Time-Phas¢ed Force 


Ceployment Data ({TPFDD) files for specific Operation Plans 


t- 
wD 
Os 


(OPLANS) outlining the suppor? conua 
Cperaticns and requirements. ace HO: fe. 114 Peior <o 
additional software development, these filles were 5s 
Win subscriters in their entirety =o initiate JCS 2 
As the TEFDD files were updated throughoit the =x 
entire file was agair sent to ail asers. These la d 
transfers, coupled with an overall increase in WIN usage, 
30: 


placed a fturden cn network compcner:.s ani hos* proces 


2 


causing WIN performance to reach an 11 BS taGeony ele ve i. 
yied che JDS Rene 
. 3% 


Anew surfacing problem was tha lack of a Multi-Level 


Particular site-unigue development incl 


3 


rf 


¢ 


= 


User's Package (RUP), discussei in Caan 


sv 


llows users with 


t-+ 


Security (MLS) systean. A MLS systen 
Varying security clearances to Simultanedusly share computer 
equipment with access to various software allowed on 2 


@eee-by-Cas]e Security check. One wheory for implementing 


i) 


Mess yscem 25 <he usage of rirgs of protective organizaticn 


©] 


for the hardware. Here, the coarating system is segmented 


O) 


iD 


meee N-rings, With N greater than “wo. The inner-most ting 
fee Ce Cecupied by the core, or K2nrel, of =zhe operating 


system. The system scfiware and securlizy processes will he 


- 


Ho 


EitaiereS: FOL instance, validation of passwords and data 
access requests. The resource allocation scitware should 
reside in a seperate ring for schéeculing of tasks and 
computes rescurces. The outer ies are available «o czhe 
feees Loe processing application programs. Routines in Rin 
eee neve access tO Rings ‘i and all Tings greater but can 


Only access more inner tings through procedure calls, *trus 


BebermcCe Oe nemplGper SseCl-2 ty check opportunity. The tings 
ex prc ecure sensitive sof-=ware and data and als 


alls against usér damage. [{Ref. 11: p. 540] 
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Tt ic interesting =o note that in the mid-1960's zhe 
Massachuset‘s Institute of Technology, Bell Telephone 
Laboratories, and the computer department of the General 
Electric (GE) Company developed one of the first operating 


a 
pyowems tc smploy rings of proterticn, the Multiplexed 
Potorm@aticn end Computing System (MULTICS). The origi 
MULTICS was installed on a G5H645, later a Honeywell 
Mmeeenimaticn System (HIS} 645 computer, and in 1973, replaced 
meee HS 6180. The HIS 6180 supports eight rings cf 
Peerecticn: the operatine syst2m uses Rings 0-3; Rings 4-7 
mmemmeavaerilabic =o the users. f[Ref. 11: p. 535] With ro MLS 
system, all machines, t¢erminals, and persennel on the WIN 
Mise) be Cleared to the highest level being utilized. 
(Ref. 12: p. 7] 

Cth=r preblems included the lack of a long-range rl 
for WWMCCS/WIN develctment and zhe sarly 1960 Honevwell 
ec 


Meena tse Urs Which is not tna state~of-the-ar*® for an 
guery and response system. 

A misconception was also prevalent concerning WHMCC 
that it would provide communications between the President 
Seamene £cxhcle. This was never the design intention of 
WHMCCS; however, what was des 


Vv 
ired was a communicat 
metwork fcr several ccmmand echelons anda reliable 


D 
53 
t 
}— 
j+- 
ct 
ey 
ie 

hg 


command and control systén 9 aie vGA top enc 
executing ccmmanders. {Ref. 1: p. 40] 
Miencuctechne Lelsesil™ty of the WWMCCS Intercomputer 


Network (WIN) had fallen below a satisfactory level, tas 


Bamieec>s ALE sites atilized th “Sit¢ Honeywell computer 
equipment te develop software applications for unique 


requirements. By the mid 1970's, there was a great depéen- 
dency cn WWMCCS ADP for day-to-day operaticns and 
crisis/e2xercise support and the need for a reliabie ccmputer 
netwcrk Eecame obvious. f[Ref. 12: p. 7] 
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II. WEMCCS INFORMA 


Ae. EACKGSOUND 


In Nevember 1981, the Deputy Secretary orf Defense 
decided the wWWMCCS Information System (WIS) modernizaticn 
Meapene+ded a fOcal pfeint for coordination to receive pelicy 
meamauadance directives trom tne JCS. [In January 1982, a 
WIS Jcint Prograr Manage: (JPM) was appointed *so contrei the 
joint modernization activities of WWMCCS ADP ani the devei- 
Opment of all teleccmmuni.cations interfaces. Small 
sit2-unique enhancements will continue =o be processed 
normally. The WIS JEM receives direction from the JCS and 
meee cs th>eugh the JCS “0 the Secretary of Deferse. 
(Ref. 8: p. 44] 

A Systen Progam Cffisce (SPO) was estabiishéed within 
Meeerclce Electronic Systems Division to manage WIS acquisi- 
Peo ahd ELCVide SuPpECcrt in such areas as architecture and 
System encineering. The S?P0 also maintains Aizt Force 
programming and budgeting data for zhe W Nod=z1IZzatecn 
fee 6 f REE. 8s p. 44) The Director, DCA 
have siqned &@ Mexzorardum of Agr2ement wh 
guidelines for «he Command and Control T2 
Peer SUEDCSt te the WIS modernization = 

Boomers c COqlegon the WIS Moderaazarion program is <c 


Beevide the NCA, JCS, and Unified and Specified commanders 


with real time access to status and warning information. 
WIS objectives include improved WWMCCS performance, 


greater WIN teliability, modernizacion of WWMCCS ADP hazwareé 
and scftware, and increased ADP security. Of «he three 
WWMCCS ALPE categories mentioned previously, WIS will 
Pauseeclazgemats e©LlLOst Of Catsgory A =-- WWMCCS standard 


15 





SPereweos. Ci the four Euncticnal families of operational 
Eequizrenents, WIS will focus only on two: Resource and Unit 
Monitcring (RUM) and Conventional Planning and Execuztis 

D 


Ts 
tJ 


(CPE). ‘The Air Force will continue to manage «he WHWMCCS 
systéens in the Nuclear Planning and Execution (NPS) and 
Tactical Warning/Attack Asséssment and Svace Defense (TW/AA 
Smet) arcas. [Ref. 8s p. 18] 


Eee SYSLEM DESIGN 


The WWMCCS Information System (WIS) was designed as an 
interactive netwerk syst2m in which a user at any ccmmand or 
agency can communicate with a user/host at any other ccmmand 
Semegency also ccnnected to the network. The Defense Data 


Network (PDN) will provide thé interconnection among WWMCCS 


a 


ces A Retwork Operations Center will monitor the network 


as eparste node on the DDN. Local area networks (LANs) 


( 


Mme xc St [Or Sccure and interactive communicazi 


t-!- 


a 


POLrANS Lpclude: usual 2as@e inc 


$ 


pavenhtace 


2) 
me2*; specific site requirements, dé 


ie 
©) 


Systems 


t 


Oo 
u 
fe. 

Seaddarad components icr common functions, rlexibils 

Selective modernization, and the ability to develo 
fae ael security solutions. fowste  2ealodg ta pnical ly 
the user Support scheme envisioned by WIS. 

{Ref. 8: p. 3] 

The WIS system objectives inclu 
} user-friendly interface development 


( 

(2) data Seeccssing capabilities fcr ali WWMCCS 
nl 

(3) reliable inter-command communications 


(4) impreved processing capabilities during bat-le 
Conditions [ief. 8: p. mS } 
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Figure 2.1 User Support Overvicw. 
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are divided into three categories: access, availabiil and 


Beejecced Whos Characceristics <o accomplish these goal 
~Y, 

modularity. 
peeess characteristics: 

(jeer dance eWiS"§support for major sites 

(2) remote access capability for small sites 

(3) user access from a single work staticn 

(4) a multi-level security systen 

(5) minimum site training requirement 
Pueatabeility characteristics: 

(1) secure and interactive network 

(2) operational for day-to-day and crisis suppor 
feed ttey and t£lexitiity characteristics: 

(1) accomodation of a wide range of sites 

(Z) standard software 

(3) minimum implementation disruption 

(jeeceatc-Of-the-art =echnolcgiss considsred 

(Ref. 8: p. 16] 


C. SYSTES STRUCTURE GUIDELINES 


The WIS JPM Cffice has devsloped guidelines for WIS 
System requiremerts in the areas of standardization, 


security, and system characteri 


(p 


Ss Ss 
Hardware standardization will not be mandatory becaus 
of the numercus #xisting systems and 

procurement possibilities. Software development sta 
zation will be achieved *hrough the exclusive use of ADA 4s 
Meee rogram cesiqgn language. Standard, pre-determined 
Beo>OGOls will set the inzercomputer communications stan- 
Gazds. Rcutine and emergency maintenance will be acnictorzed 
byes Single organization; maintenance standards wili be 
imposed. Toc facilitate cooperation among the renote sites, 
data definition standards will be inplemented. [Ref. 8: pe 
31} 
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imme cone Of =he Wis SScurity program lies in the mnulti-~ 
level secure LANES with secure interfaces to all other WIS 
components. Authentication for users will te aoplied asa 
Security ccentrol with an audit capability availabis. pcD 
security requirements require that a multi-level security 
system Le achieved within the WIS modernization program. 
(Ref. 8: pw. WW] 

The WIS modernization program will provide capabil 
tO improve cemmunication survivability and ADP support +o 
WHMCCS sites. Scme proposed capabilities are 

Gileecistenouted and/7o> redundant processing wit 
remcte access 

(2) graceful degradation 

(3) rapid restart and recover; 

(4) distributed data files 

(5) transportable systems 

Soaencards for accessibility include the ability <o 
access all WiIS-rezlated capabilities from a single workst 
[mom Other required system capabilities are flexibilicy, 
memeakility, maintainability, and interoperabilicy. 

Meet. 8: p. 35] 


De. IJRPLEBENTATIOCN 


_ 


Mio Will be implemented during four modernization 
Beemencs and utilizirg four major contracts. The 
Maintenance Segment includes the near-term é€nhancements to 
memeeecbassline harcware and software to stabilize WIS perfor- 
Mance and will be accomplished through «the 
Contract. Next, the TIransiltion Segment, li 
Common User contract, transfers the user con 2 
MieweXxXaStangitNMNCCS ADP to the WIS modular architecture fcr 
future mcdernizazion and initiates the Automated Message 
6 


Bama@iling Catabil<y. ‘The Joint Missicn Segment concen 
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Smee nue commcn applications software modernization; thse Joins 
Missicn Hardware contract will provide =he standard hardware 
kase and supporting cperating system by late FY85. The 
finel segment will be the Service and Command unique arcrli- 
caticn scitware improvements which will be ths 
respcnsibility of the Services and user commands. Figure 
2.2 illustrates the WIS growth through the four noderniza- 
20n segments. [Ref. 8: p. 3] The last major contract, the 
Semi quraeticn Management contract, provides for independent 
Velidaticn of the software provided by the Integration ane 
memmenme user: Conttaectcrs. In addition, this contractor will 
G@esas~ the WIS JPM ir the overall configuration nanagement 
Samewce (Ref. 133 p. 9] 


En EVALUATICN/COMPARISON EFFORT 


tt, 


As menticned eariier, one of the major problems in the 
Pemecs COMMUnity is the unsatisfactory performance ct *ha 
WWMCCS Intercomputer Network (WIN). In Sevotember 1981, 
DemectOr, DCA organized an effort to investigate the 


replacement cf the present WWMCCS network system with 


rey) 
| 
O 
4 
‘fa 


conczemporary system. 
Piiielaiiy, was 2de€a surtaced co tak2 advantage of +h 
meovern AUTOLIN IT technology and develcoo an AUTODIN Ii. It 


1h) 


was envisioned that AUTODIN II would provide 2 common user 
data nezwerk with a gulti-levsl security systen to mest 
Meemerk “equssemen=:s through 1985. In 1976, the contract 
WeeeaWea-ded to Western Union, Inc. and the Initial 
Cperational Capability (TOC) was set for January 1979. 
fRef. WH: p. 44] 
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Beginnirg in 1979, the IOC date was extended seve 


| 
Sy) 
y- 2 


times until July 1980, when the Assiscant Secretary 


CG 
wt) 


Memem=e fcr Command, Control, Communications and 
Intelligence (ASDC3I) requested a review of the AUTODIN ITI 
project with some pessible alternative proposals. In duly 
low, toe Deouty Under Secretary of Defense for C3I 
(DUSDC3I) questioned the wartime survivability of AUTODIN 
femmeeine dourt fecused on one of the basic design criteria 
for the systen -- a Small number or Switching nodes. T 
— nedes would require manning and would be rela 
tively 2xpensive. Immediately after this, the Air Ferces 
9g 


Test Lizrectcr issued a report concérning the 


= 
, 
~~ 


a 
Seeecee system and doubts abouc «he technoiogy and future 
System perfcrmance. [Ref 14: p. 45] 
mee tate 1981 the Director, Defen 
(DCA) established thres amc 2camns: 
Team 1 —-= tasked wita d 
survivable AUTODIN ITI sys 
Team 2 -- tasked with designing the be 
which would ke based cn tna 
HOoLegy, a Repizes approach 
Téam 3 -- a 20-day evaluation té4an 
The evaluation tsam was to éestablisn guidance fe 
tTwO design teams and develop evaluation criteria. [Ref. 16: 
pe. 45] Scme of the evaluation factors considered were 
PievivabDili~y, security, system design, and cc 
ARPANET replica freopcsal, referred to as 
b 


Mere) flexible routing algcrithm, and artor 


ne 
eter akle to withstand network element 1 


wD 


Pept lity Capability. [Ref. 15] 

MUEOnIN £8 now hed 2 Ssix-yea=> Old design a 
continuous technology advances, the expected li 
@emewcte= System is abecut eigh*+ yeers. In the area of large 


data transfers, AUTOLIN II was superior to the Replica 
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ts) 


d¢sign. The Replica design would be using smaller packe- 
for méessace transfers throughout the network -- smaller 
packets necessitate more numerous packets which in turn 
increas¢ the overhead traffic threugh the syste: 


ii 
degrade system performance. If AUTODIN II had been avai-~ 


ct 
ge 
}$-4- 
i3 
i) 


lable fer luplementation during the evaluation efror 
frame, «ne *echnclogy, schedule, and cost risks asscc 
with the Rerplica propesal would certainly have cancelled 
some of the benefits. However, having no satisfe 
AUTODIN II system online, the benefits of the Replica 


approach justified the risks. [Ref. 15] 


Mmomeeconscenc EFYS2 dollars, AUTODIN II total system ccs 
Was @stinated at $588 million where the Replica total system 
@eseewas $429 miliicor. It was projected that the AUTOLIN fF 
amnual operating costs would ste¢acily increase to $72 
memeren Until 1995, where the annual cost would level off 
Seger too°hiilion. The Replica system annual cost is 


eeeeeicted to peak a= £71 million around 1985 an:d 
Meepeass tO “he $40 gillion range in 1987. Figure 2.3 sh¢ws 
DDN/Feplica annual ccsts. [Ref. 15] 
Mieeckruery 982, the evaluation was comple<ed. Bases 
Smeene COnciusions the Directcr of DCA decide ¢ 
apprcech would provide a better DOD data netw 
Consequently, the Deputy Under Secretary cr BD 
MemeeeaMmifation of the AUTODIN II network and =he initiali- 
Mean Ot the Replica design, <2 be known 2s the Detense 
Cata Network (DDN). (Ret. 44; p. 45] 


Fe. DEFENSE DATA NETWORK 


The Lefense Data Network (DDN) will provide *hs WIS 
Community with the secure, celiable, interactive netwer! 
necess 


J GrcCcasOUNET cera nesctons. The DDN :s designed as 
a single, integrated packet-switching data network. The 
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Figure 2.3 DDN/Replica Annual Costs. 


completed network will have 91 sub 


A 
t 
j-- 
en 
(D 
ty 
in 
<j 
$9} 
ct 
fp 
> Ss 
7) 
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appreximat ” 488 hosts and 1,446 terminals. f 
71 ¢witching nodes at 85 sites. The DDN meats th: 
Worldwide Digital System Architecture (WHOSA) standards a 
Sege-ctives by providing a solid techuclogy base, iow risk, 
and a cost effective system. This network will setisfy 
Siiecent Survivability requirements du a1 
LOD intercomputer telecommunication requirements suprli¢cd b 
moe JCS. ([ Ref. 163 p. 2} 

The wajeor DDN design concepts are standardized ccapo- 


henris, distributed switching nodes, and automatic fault 


a | 
mM 
Q 
O 
W 


osts and lcwer maintenancs and support costs. Also, 
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nition. Standardized components allow smaller develcp- 
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Gompcnent mcdularity reduces <=he maintenance impact. 
Meeeocabuted switching nodes aid in eiininating choke points 
which increases the cverali survivapilitv of «he system. A 
wide distribution of switching nodes usualiy minimizes any 
Mieet alter a Single node failure. Another mejor ccncept, 
the DEIN autcmatic fault reccgnition syst2n, is implemented 
through a seriés of Monitoring Cent which az¢é in 


Continuous creration to monitor ne? ommance and 


at 
x 
@) 
rj 
x 
Ls 
i 
ae ed 


identify txcuble areas. 
The network Monitcring Centers will he key nodes on the 
DDN network. There will be a principal system MC, an alter- 
Mememnc, CLegional MCs for Europs and the P2cific area, anda 
MC for each keyed community. Primary functicns for the 
Memeesccrinag centers will includ:: 
(1) monitoring the status of the retwork 
(2) isolating network faults 
(3) supporting software maintenance 
(4) providing network element infocmat:.on [Ref 16: 
pe 5] 
The Défense Pata Network will provide four levels cf 
Emeeie:. 6C the current WWMCCS community: 
fevei Vom= hCSt DErOCceSsOor Sites fcfl Reso 
Doe Onatorang (20d) and Conventional P 
mxuseuenou (CEE) suo port 


hevew 2 == bimi-~ ed on-site 


™ 
tj 
G 
Q 
ip 
wv} 
(f} 
) 
rt 
va 
|) 

2, 

sft 
O 
ij 
it 
12) 
t= 
(= 
OF) 


access +o remote host processors 
Po eee OT OCeS= >, SYUDDOTL thee IR RetWOCTK access 


tc remote perecessors in Hawaii 


‘J 


fave eee siippor: chrough 2ndividual terminals 
ccennected ¢o remozte host data processors [Ref. 8: p. 
27) 
The Defense Data Network is designed for continucus 
Seoeatienh ce SUPEODE real time handling of ali user's 


Meet tic, The availability goal is greater than 99% for any 


Zo 





Peeeeect users, [Reft. 17: p. 5} Tne thrse major DDN systen 
elements ar¢ switching nodes, IPiIs, and Mini-TACs. 

She Swictching ned¢ used for the DON is a Bolt Beranek 
and Newman (BBN) C/30 switch, a microprogrammed ninicorruter 
designed for unattended operaticens which eliminates the need 
for DIN dedicated personnel at 2ach switching node. The 
mmeemencut capability of sach C/30 nod2 is 300 vackets vex 
second in tandem processing -- 360 packsts in, 300 packets 
Switched, and 300 packets out hie uiy: SOG oa tot 
900 rackets being handled. The loag term reliability g 
is 5000 hours or greater for Maan Tins 
(MTBF). The déeveloprent risks aze low since the C/30 switcn 
and its software are functicning elements on such networks 
as the ARPANET; WIN; Community On-Line Intelligence Network 
(eens); intelligence Data Handiing System, Conmunicaticns 
Meedoc); anc the Eurcrean Mcvemense Inicrcmation Network 
OMONET). Technology risks are corsidered low since only 
ftom modificaticns are neccessary. f{fef. 16: p. 33} 

The Internet Private Line Intetfacs (IPLI) is based on 
the Private Line Interface (PLT) which hes been used on tha 
MeeANET and other networks for mors ta 
peeve Li technolicgy allows the simplest of end-to-end 
pMeryrc ion available. An LTLPI wiil reside between a host 
ees watching nod2 Or Mini-Terminal Accsss Contreli 
Smee -TAC) and switching node, cependitg on site conrigura- 
feoms The IFLI is currently under development with 
ieee tal delivery date of July 1983. I+ will support the 
Memoria bO) DPretreecl, Interne= Protocol (IP), and widesp- 
read deployment is expected becaus2 of reduced cost, size, 
and pecwer and weight requiremenz=s from the PLI currencly 
keing used. The IPLI hardware consists of a@ KG-84 crytco- 
graphic dévice and two Motorola Mc68000-based packer 


processors. A minimum of fifty packets per second is sg 


iD 
jv 
{n 


PEeEOEOUGNDU= goal and the MTBF goal is at least 5000 hours. 
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Peeecern Tiage To Repair (MIETR) 1s expected to be apsorox 
mie y thiray Rinutes wath an availability of 99.9%. The 


IPLI requires no additional pexsonnel and the maintenarce 
= 


( 


and mcnitcring systems may bé operated from a remote si 


The deveicrpment risk involved :s considered low due ¢ 


O 
ct 
a 
(D 


i. 


eeda2tional architecture used. [Ref. 14: p. 39] 
A #ini-Terminal access Cont:rollor (mini-TAc) is a 
terminal access device which allows a cluster of u 
Sixteen terminals simultareous access to the network. The 
1 


hardware of a mini-TAaC is MC6H8000 microprocesso 


= ae) 


mavemy and #ultictle retwomk inserface ports. The mini-TAC 
software is based on the software developed for use cn the 


meee and a. lors terminal users to establish cconneczicns 


rf 


ketween their termineis and an arbitrary host on the 
nsm: 


Meeewotk., the DOD standard IP tind Transmission Centreol 
meeeccO)] (TCP) ate used. The IITBF gcal 15 greater than 5000 
Memes and the board-swapoing capability simplifies mairte- 
Meee, Since the miri-TAC is also designed fer unaztended 
Seera-icns, no dedicated personnel are requized. Control 
Mema-ecr ing and hardware/sottwaie fault isolation can be 
fe@eonmtiashed remctely by the MCS. Mini-T&C availability is 
expected during FY84. [ Rez. 16: p. 42] 

Siemes=n> MajOr COMsage ison factors for the AUTOLIN 
TI/JDDN svaluation was survivability. Ta2 small number cf 
Meees Doceposed Ecr the AUTODIN II system lett major doukt as 


meme cs SULVivabilet DDN s survivability fe 


“ 


a d 
(ljecedUgdarcy -—= che tinal system will ccpprise 171 
Seacene Ng Secges, os = 2 Xecd ator. -ODring Centers, and 5 
Gemewie LeeOnstlituzi1on nod<¢s with MG capability 

(2) disseminated switching nod¢s -~ geographically 
dispersed sites afford the high2r priority users a 
aqreater chance of reconstitution 

(3) a dynamically adaptive routing algerithm which 
@ucenet ically reroutes trarfic around neavily cong- 


ested or damaged links and nodes 


27 





(4) graceful degradation bacaus2= of the netwerk's 
rescecnse to damaged nodes 

(5) four levels of precedence/preemption vrocessing 
(jah ad=hang and H=SM© protection including electro- 


Magnetic shielding, line isolation, and power surge 


hco cee £2 ON 

(7) reconstitution -- the five mobi moeomns Est On 
nodes will be positioned in areas less likely «c be 
targeted and all users wiil nave a detailed alterna- 


Pp Vemsoutlindg plan 
(6) preplanned rehoming -- all users will havé a 
Meee w esting Of Swiztching aodes fer rehozirg 
[Hebets Pee t25 | 

BON Sccuss]sPwill be accomplished through link 4ncryp- 


$2 


- 


moe, Sen a-cCGmend encryption, and physical and precedural 
security measures. The KG-~84 cryptographic devices will 
h 


rs 
Tins In-=erface ({IPLI) devices between the hosz and swixtchir 
\ 


= 


ia) 
ct 


= ¢ 


O 
«< 


necessary link encryption. The Intezrner Private 


Mee@ercre B2n2-TAC and switching node will provide the 


e@emeG-=<30 encryption. The IPLI will also separate subscri- 
tT 


meeoecP=srating at different system security levels. ar 
physical security measures, all switching nodes will be 
TEMPEST enclesed and located in secure military faciliti¢s. 


Meeeyecysicem MOricoring Canter (SMC) personnel will be able 
Memrct- lieve traffic statistics. All personnel a= regiozal 
and System "Cs and personnel with access <=0 Switching rcdés 


mae tClid a SECRET clearance. In addition, personnel with 


M 


ed 
eemene highest security level of the subnetwork subscribers. 
{[Ref. 16: p. 12} 

PrewlDN program cffics is within the DCA organizaticn 


meececSc]= =0 a MC £Eor a secure subnetwork must aiso be cl¢e2 


and consequently comes under DCA's staffing and policies. 
The Naticnal Security Agancy (NSA) has the responsibilicy 


mepemee= 2. fying and accrediting the IPLI dsvices and 
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analyzing the network system design for use with classified 
meee. DDN subscribers will be responsible for acquiring 
the rececsary hardware and software for DDN operation and 
Suppcr=. [Ref. 4s p. 258] 

Arcther major factor considered during the evaluation 
SE was cost. Acccrding to the evaluaction tea he "DEN 
user 
ie acl 
feos... ". [ Ref. 16: pw. 15} Using FY32 dollars, che 91 
fal 


li:cat2d systems Listed in the user reguirement data base 


a. ‘¢ 
System can provide COD with a survivable, ccmmon- 
Ir 


at a cost less than being paid for the dedic 


Seeercove>: $35.2 million for annuai Operaticn. The annual 


cost for the new DDN system includes: 


System Management 3,254 K (102.35) 
Trunk/Access Lines 24,694 K (et 3) 
Operations and Management 4,428 kK (13.6%) 
Eee 1 $32,476 K Annually 


When dJevelocpment and acquisition costs are included, DDN 


mie CLEeraeing costs average 335.549 miliion over a ten 
Meee ces icd. f Ref. 16: p. 255} 


‘) 
(fh 


Tre Defense Data Network system design builds on “ho 
a n 


(hb 


[mpendi Netwerks which use the BSN C/30 swiztchin ousl 
ccompanying software: 
(1) ARPANET ~- with 90 nodes az 75 locations 
(wii w2enh 26 nodes ac 16 locations 
(See! —“ with European locations [Refs i7: pe. 2} 
mae, DEN wail enmplcy a four stage gaplementation approach 
Which shculd lead to a graceful evolution capitalizing on 
existing networks and interfaces with minimum risk fcr new 
Meennclogies. The ARPANET will supplement DDNts *e2st 
develcpment facilities bux will remain as a scaled-dcwn 
tesearch network. It will later serve as an operatic 
testbed for future DIN software reléases. [Ref. 16: pe 24} 


As, 





fre f£OUr transition stages for DDN I are: 

meeage 1 ——= Service will be provided to subscribers chat 
can be handled with minimum development. The WWMCCS Necwerk 
C/30 switch upgrade will b2 accomplished during this stage. 
Communities cf interest and networks with differing sscur 
levels will be physically separated into «<hree distinct 
netwucrks: 

(1) Strategic Air Command Digital Network (SACDIN) 
== at a Top Secree (TS) system—high security level 
utes cazy Network (MILNET) == for unclassified 
subscribers te include military ARPANET users 
(peecommana and Control Intelligence (C21) Network 
=~ With a TS systeme-high security level netwerk with 
twe subnetwork communities: 
he G2 Community besSically for WIN suoscribers and 
Peecmimtoll=2gence Community primarily for IDHS 
TI/Department of Defense Intalligence Infecrmaticon 
systems (DCLIIS) users. 
Pree, 1 1S €xpected te be complated by and of FY83. 

Stage 2 —- As additional IPLIS become available during 
198%, mors subscribers will be added =o the network. The 
Meee tTACS Will be imrlemented in Stage 2, also. Completion 
is expected by the end of FYS84. 


Stage 3 -- During Stage 3, the three separate networks 


Ll @ 


Diginacted during Stage 1 will be integrated *o become the 
feet, SUEPCEting nulditiple levels of security. During <=his 
meee additional classified subscribers w 
meme a 2nte the network. Stage 3 wiil be co 
eea, Cf FYs5. 

eeade 4S 8 —— A= hest interfaces are developed, all 
remaining DDN sukscribers will be includéd in the network. 
The final DDN I netwerk will consist of 171 nodes supperting 
$1 systems, and the [CLIN system design allows for a mncederate 


Sncreass in traffic from each netwerk user. [Ref. 16: pe 
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foe figure 2.4 shows the transition plan for the DDN I. 
(Ref. 16:3 p. 190) 


Ge. WIS/CON CONNECTICN 


Currently, the Defénse Communications Agency providés 
WeameCS Sscfitware suppert through the Command and Control 
feeomical Center (CCTC). Although the WIS modernization 
feeei= Ct @ part of DCA, the WIS JPM and the Director of 
DCA hava entered a Memorandum of Agreement which insures 
CCTC support during the WIS modernization effort. Hcewever, 

Since plans call for the Defense Data Network (DDN) to ke 
Meeeigcea-sd into the (CCS, =he DDN program office falis under 
@p]e DCA crganizaticn. The DDN wiil provide 2 commen user 
faeeonk, Cacable of incerporating the majority cf the C3 
netwerks availabie tcday and providing a standard, secure 
and shared=-resource capability. 

of the WWMCCS 
Semm@un ty. As can be sé2n from Figure 2.4, networks such as 
miemmonc LDagital Netwerk (SACDIN) and the ARPANET will 


fees DDN will net ce restricted to support 


Mewtize the Defense Cata Network for intercommunications 
among member sites. With these various user communitiss 
riding on cne network system, a multi-level Security systin 
is impéetative, although technology hinders the develcpment 
cf such a system. The management of the DDN netzwork, a 
network where users ranges from unclassified military usérs 
ommeere ARPANET tc high classification users of the JDS on 
the WIN, has not been sufficiently addressed and will beccnas 


mes SCUurce Cf major problems. 


fu 


As DDN comes inte being, new WWMCCS standard s 
will te implemented under the WIS nodernizaticn pl d 
existing site-unique software wili be modified to reflect 
the updated system. These software changes and ruti 


u 
wemmemcdcavisitions will atfec* every system used within the 


oe 





WHMCCS ccmmunity. The WIS medernization impact will be felt 
by all users supported by the Joint Deployment System (JDS), 
cne cf the mest widely used WHMCCS systems and the tctal 


Management system cocrdinating the links between deliberac 


{> 


( 


planning, time-sensitive planning, and deplcyment cf fercs 


(n 
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A. BACKGROUND 


In Cctober 1978, the JCS conducted a command vost 2xér- 
Geeeey NIFTY NUGGET, tc test full mobilization and derplicyment 
SBaeeosiities for U.S. forces. NIFTY NUGGET exposed defi- 
G2eneics in both the military deployment planning and 
execution precess as well as the Supporting Management 
Peeer@a.1cn System (MIS). The = most widsly utilized 
Geng NIFTY NUGGET included the Joint Operational Planning 
Sys~en (JCPS), Unit Status and Identification Revort 
(UNITREP) System, and command unique systems such as +heé 
Deovloyment Management System (DEPMAS) used by «he U.S. 
Readiness Ccmmand (USREDCOM). JGOPS supported planning kut 
emeeried ©£O Suppcrt fcr the execucion phase. The UNITREP 
System was nct resvonsive tc time-sensizive déc 

z 


CLEPMAS wae not available to the joint deployne 


«i 


eemecys-cm dcalt with Army and Aiz Force forces onlv. fh 


jer 


Meeq £Cr @ centralized deployment and decision support 
Sieeerete c©Cx Clanning and @xecution was evident. In March 
W979, the Jcin= Ceplcymen= Agency (JDA) was established ts 
E@emert the JCS and supporting commanders as the nucleus of 
Geptoym@en = end associated activities. (Ref. 10: p. 3} 

The Joint Deployment System (JDS), resident at the Jcint 
Pepilcyien= Agency, was created =o support the JDA missicn. 
MeewdtS includes perecnnsl, procedures, directives, ccommuni- 
caticne systems, and electronic data processing systéms 
Which Suppert peacetime planning énd time sensitive planning 
and procedures. The JDS concept is the d¢ 
Beagic SUtTpecrt system for all stages of 


d 
M2nct with particular focus on planning, depl 
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execution, and crisis monitoring. After the JCS exercis: 


( 


crder is delivered, the JDS allows th2 monitoring of move- 


ment of forces, materiel, and non-unit related personnel. 


Memmes cr Force List (MFL) file, schedule fils, scheduling 
requirements and UNITREP data are generated from the deplicy- 
men<c data base and distributed to users. [Ref. 10: p. 78] 
Through the JDS, the Joint Chiefs can achieve direct inple- 
Mentaticn of their derloyment decisions during veacetine, 
Semtenra EGSt exercises, crises, ard war. [Ref. 18: p. 1] 
BE. JDS/WIN LINK 

The mission cf the JDA cbhviously depends on int eur eC 


= eel ©: 
Samoecy among the joint deplcyment community. Tha WWMCCS 
Intercomputer Network (WIN) 1s used to organize these 
geographically separated host computers intc a sing 
netwecrk and becomes the backbon2 of the JDS communi 
system, és mre tee ne laren sng ard sxecuticr of 
Ment déecisicns. The deployment data pase depends on WIN for 
accurate information exchange bétween user sites and «tne 
cemmmenet. (192 6p. 1) Figure 3.71 illustrates the WIN rela- 
Meewens ps Within the joint decloyment community. [Ref. 20: 
Pp. 12) 

Prarsection throughput is site dependent bux & JPA site 
Wili usually average 1200 transactions per hour. User 
respcnse tigé is dependent cn the number cf users Simultane- 
Sijemy accessing WEIN. For example, with an average of tén 


siamultanecus users, WIN response time averages *wo co five 
e 


seconds. Ten is considered a small number of users and cree 
Meeeeten, Significant pesfotmance degradation is experi- 
emeeqg. | Ref. 18: p. 13] The WIN sofewars available for 
Meanscac tiOn= include IELNET, the Telecommunications Network 
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Frogram us¢d fo message exchanges and direct acciss 0 
M 


oO FF 


resources of remcte hests, the File Transfer Service (FTS) 


used mainly for large bulk transfers between sites (1.3., 
thea IPFCDDL fe ea nd Tepes 
Teleccnference (TLCF) capabilizy which 


nD 
emy number cf WIN nodes into a textual exchange conference. 


AUTODIN is +th2 general message exchangs system which may 
also Fe used for query/responss activities and NACE trans- 
fers data betwe Sowers 8and  AULODIN, 2zutomatically 


fcrmatting the messages generated by JDS. (Ref. 10s vm. 18) 


C. ALP GOALS ANT CAFABILITIES 


an availarility cz 24 hours a day, 7 days a week, #xcent fer 

schsdul2d maintenance and unexpected suctages. The ofa 

Geeeis So% for routine processing and 99 

BeeGerse Cocrations. The deployment daca bas2 is tesicent 

een 4izh ths wajor backup at REDCOM. fT 
S 


computer systems are comprised of fouc pr 


Cy 
qt 
ir 
fs 
j- 
= 


Mmemcial CcCnfiguraticr with shared disk drives, col 


tr) 
LJ 
[@ a) 


Ge 
Mum aet= Lacilc ty. The JDS reliabilicty goal for MTBF :%. 


Mees With MITR cf 10 minutes Most le Se Cy Seat DS 
eee ce a transacztion-criented communications svsten capakic 


Sere al~=zime processing on a distributed data base within 
BeeewwiN ]e2vironment. [Ref 10: p. 32} 

The JDS computer system avail a 
mremncs. COputer upydewn ratio; other factors inclu: 
eipPOrting WWMCCS syst 2m sottware such a 
Syszten (15S) and the General Comprehensive Operatin 
(GCOS), the JDS software which includes «he m 
Fackagqe (RUF), and WIN availability. All cf these 

c 


| 
ct 
O 
ay) 


nenzs must be availeaktie for a remote use 


G2ployment data base. JDS will allow interface 
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Users may access lecai or ztemote deployment data ba 


{fh 
(ve 
in 


using any ones of four methods. Twenty-two on-line que: 


| 
}? 
iD 
in 


acre availabie on the time Sharing system. The Manaceme 


a 


Dee GCusry System (MICS) for retrievals allows the user tc 
Seegatats a batch precess for information retrieval from the 
Master Force List (MFL) fils and schedule files. The MFL 
Geeeeeclicc allows users without the RUP capability to 
ieeeetacs 2nformation queries. Users can also utilize the 
automatic scheduling messages package +o automatically 
Tecsive mevement data for the next twanty-rour hours through 
fee ecc AUTOmated Ccntrol Executive (NACE). [fRef. 21: po. 
65 ] 


D. DEVELOPMENT 


3 


he Jcint Defloyrent System is Deing developed in five 
ges. The Bassline Stage has beer completed and JD 
Vv 


‘ . + 
in? -- 
42 ow oe 


5 
mies Service to the jcint deployment community. 17 
memereratitonal Capability (10C) fo025 the second st 
wee m 2nclud<es limited on-line update and query features, 
Geer abuctsd ErocessSing support via the Remotes User's Packa 
(RUP), and data base hackup at R=EDCOM, was achieved Deéecémber 
[eee Tne third stage incorporates long-term requiren S 
@emeni--On and validation. These additicnal requirements 


Bee QOLOr= the Crisis Action System (CAS) and will emrpha- 


Peeeewcucnh trings as multi-plan support and no-plan support. 
freer cu-ch stage is Full Operational Capabilicy (FOC) and 
emer rCC ic presently Lecember 1985. Since JDS is the center 
Geo he Corventional Flanning and Execution (CPE) functicnal 


a 
mamfeiy Of the WWMCCS ADP program, the fitth stage, Post-Foc, 
mee dezail the JDS integration inte the WIS modernization 


maoctam. f Ref. 10: pf. 78] 
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Tre JDS data base presently contains 108 record tveres 
Seewed 1n logical record relationships in the Hcneywell 


Mt=eqrated Data Store (IDS) structure. The déta includes 
Mier Ma -1Cn Co forces, nonunit versonnel and cargc, move- 
ememmand ~lanspcrtation. The JDS is a cconglomeraticn cf 
Seemarpl. ication programs and subprograms which maintain and 


Man2apulate the deploymenzt data base. The majerity cf the 


Miteme=ecLowale works or menu~selection and pre-defined display 
Screens. Aithough the entire data base is resident at che 
JDA, varicus deployment community members will mainzain 
Separate data bases to Satisfy unique command requirements 

£ 


and ccmmand and contrxrecl functions. Each of these sites w 
also maintain a Data Eas¢ Managemenz System (DBMS) and lec 
access tc the main data base. These distributed data tesées 
will te subsets of the master data base and will bs main- 
fFainec cencurrently with the master by near-simultansous 
Ser Cdod. taeansee = CNS. 
Meee cistrlikution will significantly reduc 
network performance dégradation associazsd with large data 
transfers. The distributed data bases will also enhan 
eerevevVecility by providing multiples backup locations f£ 
mimmets2ors. frRef. 103: p. 25 } 


Po FURCTIONS 


MEemerecne Major JDS functions 2S) —O0 provide a bri 
between deliberate planning and tims sensitive p 
Beecution. The two systems utilized during these proc 
*#he Joint Oneraztional Planning System (JOPS) 
feemeeee status and Identification Report (UNITREP) Systen. 


JOPS establishes procedures for planning and ¢xecuting 


Mepewoym@entS during peacetime and crisis sSituatziors as 
Merect=c by JCS; the UNITREP System contains the location 
and identification of actual military unicts needed durin 


4Q 





the planning and execution phases of depioyment. The JPS 
supplies the necessary link between these two systene tv 
Maintaining an up-to-date deployment data base. [Ref. 10:3 


fees GUL= 3.2 graphically illuscrates the JDS ccnnectic 
batween deliberate pianning and time-sensitive planning and 
meeeutior. (Ref. 103: p. 10] 

During the deliberate planning phase, Time-Pk 


b ‘e 
Deeeoy@en: Data (TPFDD) files are developed for a specific 
ie 23 a 


SmecetlLon Plan (CPLAN) using JOPS and UNITREP. Lop eed a 
data is ccllected frem seupoerted commanders and servic: 
requirements. The JDA noids @ two-phase centerencs fc 


2 r 
Mmemenemsent of the data and then the TPFDD is incorporeted 
mmeorthe JDS data base for that spacific OPLAN. This on 
Peowedes the primary source of input into the JDS. Seme 
rooOblems with these frocedures are the time-consuning 
Conferences and reviews and <h manuai manipulation of the 
fees { Ref. 103: p. 12} 
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AS previously discussed, sks information flow betw 


¢ 


ah) 


+ 


the NCA and military forces denends upon a reliable, sécure, 
@Gk. The WWMCCS 
Intercomputer Network (WIN) was desig 


and survivable intercomputer nety 
n2d to provide exchange 

Geen rormaticn through computer-to-conp nd remote 

Sewemrnadl-<tO-computer processing using distri 


4 
eoncerts and workicad sharing téchnigues. f 


One = .Den 42 | 
WWMCCS svclved through the early vaars as services develooed 
hardware and software to meet unigqus teaquirtements. Based on 
the evolucticnary approach to systems davelcpment, WWECCS 
Semeeag =sVCclvye through requirements s2ecificaztions as opposed 
femme] tClecditional system acguisitio2n apvoreach. This thecry 
Memos perted by a lack of specific £3 system criteria; 
Beeety undée=stcod C3 systems concepts; ianguage barrier 
between the policy makers, planners, and commanders; and the 


16 
Baemeeus <ramewortk fcr C3 systens svaluation. [Ref. 5: pd. 


6] There aré numerous systems cther than C3 systems woich 


Si@eect trem cne ¢z mere of the problems mantioned. For 
oar 


Gastence, any highly specialized system wiil likely é 
ence barriers ameng 


2S ..3 
Pmeercv¥en With the carly WRMCCS, allowizg users <c 


ct 
aa 
wD 


A 
develop small, unique systéeas independently, rrecludes 
g 2220 a tTesponsive, larger 
pale COVYiouSly, intero 
@emee=n fer these individu =eoe). (¥eney years 
later, WWMCCS remains some due to the aksence 
G@umaecentralized, long-range plan ¢f m 
eget: Ccntxicl of WHMCCS 4 
MAMICCS. Wich the WWMCCS Information System (WIS), a Jcint 


Pregram Manager (JPM) Office was estaolished <c provide 
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Centralized managemen= £92 all aspects of the WWMCCS ncd2r- 


Megecach Ercgrem. 


A. SCETWARE 


eae CCMCULTer Operating system utilized with the 
e m 


Honeywell equipment is the General Comprehensive Operating 
System (GCOS) designed ny Heneywell. Honevwell also distri- 
Dieses this cperating system to civilian customers but the 
Gemmand and Control fLechnical Center must extensively ucdify 
each GCOS release for stcurity additions and unigue WWMCCS 


S of W 
Software sc the GCOS used within the WWMCCS ccmmunity is 
Vv 


Consistently several years hehind the current civilian 
versicn. GCOS was déveloped to sunport a single-site and 
batch-oriented user community and has preven very successful 


an such situations. tresent day C3 system requiremnencs 
Meme ve-, demand an snline lnteractive processing capability. 
¢ 
Whiie ocdificaticns to the Foneywell hardware and software 
Meee wrLCcved perrtormance, the basic cizcui is designed 
P 
€SSing anid cptimal pezriormance will rot be 


memeeecactch proc 

Gemeeved in an orlin ractive ¢navironmenc. 
ta dase System, a Data Base Management 

Syoeer {DEMS ib Vv 


Wega ting of 


allow ¢asy re«ris 


O 
liv, z~nhese management 
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Systems are user~friendly a 
ae US) Se DENS Sed with WWMCCS is 
the WWHC meénz System (WWDMS). Since WWDMS 


Seed iss =the eee sel te= On <h= GCOS 


cS 

ieéncies of the military version of GCOS ans 
Gata in and cut cf primary memory, the performance 
memedave-scely affected. fRef. 5: p. 25] 
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_ 


Kepor<s on the user-friendly aspect of WWDMS have net 
Teen favcrable. For the most part, «he WWDMS language is 
rc 1g rds the more technical personnel an 
hed for the average ANMCCS user w 
claire fONSeGIenc iy, UwSers are uct 
Eursue the fanagement system capabilities beyond s 
procedures and WeDMS' full facilicies temained unused. For 


+he ccmnmunit 


oe 
hee 
at 


~¥G explicit the systems and capabilities avai- 
mameenan AWMCCS, a user~frtiendly and responsive DBMS is 


Gaiptetecad Gatavc= 
u 


f D) 


necessity. Since the concepts of a di 
Management systenr ara new, a reliable ezy Language cculd 
Siemace Guring the development interim. I+ snould require 
Minimugr cemputer experiance and 2 mininum amount cf svecial 
Meaaninc. 
Mee need Sor 2 MNtlti-Level Security system will not be 

@ current WWMCCS Honeywell equirf- 
only two machine states, 


Ss 
plishes the kernel func- 


Pp 
te a m 
peepee Ci the overatirg system, password validation and date 
MegmestsS, 2S weli as the functions tor scheduling end allc- 
meee nm CfL teSOurces. The second state is for us3t 
See Ga-icns otograms, referred tc as the Siave stazé. 
maeGe. S52 Pe 29 } 
Since the security protection orocedures, ali System 
Software, and the rescturc2e allocation procedures reside ina 
SeecaMs Ting, access to the specified ring area is common 


Memeo uScrs With access *o any one section of that ring. 
Meeweculltent theory is that, under th en zl 
systems programmer shculd be able +o penetrates the kernel 
fe—@-16H and gain access to all passw d 
Sieekaing crecedures. 

Security alternatives to a MLS system are dedicated 
computers, scheduled operations, and system-high security 


m@eradt2cns,. With dedicated computers, a separate computer 


u7 





required for ¢sach security level and individual deca 

re required fcr each application requirement within 
ent security levels. The scheduled ooerations 
sures all data per security level is processed at 
ize 


Be Mite mne see CreomilcerS OF G2treren+ 
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Meemcc COMIULSr avallability. The most difficult asrect 
his mwethed of secure processing is the sanitization 
necessary between security level precessing periods. The 


entire system envirerment must be modified, beth the on 


ny) 
@) 
ey 
}-! 
by 
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@memeenvys. cal tacility. In addition, communications lines 
Geers Lioken, disk packs must be exchanged for the diffe- 


t4 
(D 
‘3 
ct 
fn 


ecurity levels, ani main memory cleared. This 


fo) jaemavcnagcs OFS £9 ¢wO hours to complete. [Ref. 5: 


rd kd 
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Bmeenanrd alternative, systen-high security operations, 
Pomme marti iy ised throughout the wWMCCS ccmmunity. With 
Seeeeeg-hidh Creratiors, ail personnal, physical svace¢e, and 
Pemecneat must be approved for tne aighest security level of 
the intcrcmaticn being processed. Tne biggesz disadv 


fameedac Sethod is the restriction it places o 


Geeerences. The system-high security a 
S 


Memeoecrr rectly, will satisty security ile 
n 


EF. HAFOWARE 


~~ 


The a ility of an electric power source areéeatly 


va D 
Steet] t£he reliability and Ssurvivabii:ty of 2 compu<sr 
NEtwecrk suc S 

| 


WHMCCS Intsrcomputer Network (WIN). For 
x 


th 
7) 


| 
mee current Ve pele. Sea da Sdmeri ceria for the 


i fe 
) 


gee ab tty of Gclectzic powers. If electric powsr 





Pree ed Cr the air-conditioning damaged, data processing 
Cape. bilities ar2 totally lost or, at a minimum, severely 
degraded. Only a few WIN sites have a reliable backup power 
eomece OL Ledundant computer system. The National Mili<ar; 
Command Center (NMCC) maintains two independen* power 
Pemecees LCL 1tS computer system. This system affords 
prot.ection against various lccal power blackouts and irregu- 
Meese ne> in the commercial pewer system. f{Ref. 5: p. 29] 
Mewerrec alsSc maintains a totally sedundant computer systen, 
haraware and software, located at the Alternate Naticnal 
Military Command Center (ANMCC), which has an internal power 
generating capability. In early WWHCCS years, zhe ANMCC was 
@emeaceré¢dg Lardsned and fully self-supporting, but the 
Pimeeeona-< Site is ne lenger considered hardened agains= the 
Smeetenc threat. A few other large WWMCCS sites utilizing 
commercial power are also armed with an internal power 
Mem@emeatang capability, for instance, <=he North American Air 
Defense Ccommand (NORAD) and the Strat¢egic Air Command (SAC}. 


Most cther WWMCCS sites have no reliable backuo pcewer 


peas PLOXiMity. For example, <he J 
Mairtcains a backup JPS data base at t 
(REDCCM) but which is physically located at tne same 


ae at y . 


C. IVY LEAGUE 82 
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Pte na che petiod 1 March to 5 "March 1982, th 
conducted a WWMCCS exercise, IVY LEAGUE 82. The ¢€ 
was desicned to evaluate defense cperaticns = 


u 
fa@emat the Pentagon, then relocated to the altern 
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command center, the ANMCC. As the exercise progressed, WIN 
performance drorred and respense times reached an 
unacceptable level. A DCA/CCTC sponsored IVY LEAGUE 
Analysis Task Force was organized to analyze che performance 
cf «he WWMCCS ADP system and network, with concentraticn on 
Pmemepar-1cular problems encountered during the IVY LEAG 
Premesso. (Ref. 22: p. 1-1] 

The Task Force fccused its analysis on the four major 
Sites where the slowdcwn condition was most prevalent: the 
NMCC Readiness Syster, the ANMCC, REDCOM, and the JDA. 


These four sites were not all the WIN nodes participating in 


th 


the exercise, but 1% was felt these sites were indicative o 
Senate WIN perfcrmance during IVY LEAGUE 82. Information 
meemcoGlLleceed from cn-site ex¢ercis? pérscnnel, manual icgs 
updated thrceughort the exercise, computer generated lis 
ings, and WNWMCCS computer system console logs from «he 
BPemercipating sites. [Ref. 22: p. Vv} 

The IVY LEAGUE Task Force revealed severel major factcrs 
@eme22cuting to the WIN degradation: 


(1) excessive communications processor loading 


+ 
ct 
bors 
O 
SJ 


(2) communications subnetwork fragment 

fj nOst CcMEutsSr resource Contsn=ion 

Way SOLtWars resourc]e Contention 

isi tanadgenen: of computer operaticns 
EFacm ci these will be discussed in the following s¢ctions 


Meee che. t impact on JDS perforn 


pv 


Lee. 


D. COSMUNICATIONS PRCCESSOR LOADING 


<< 
ee 


Mmoeesiccessttl Ofstaction of the WIN network defends on 
Pmeineccnscrained fiow cr data between the computer system 

ameetne network. A communications processcr is used on che 
MeemGnk £¢ ccordinate inputs from remots terminais aad send 


oem to the host system; it also recsives oucputs frem the 
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computer system and sends them to the correct usar. the 
communicaticns processor handles «he connecticn from <~hs 
host computer system to the network. The Hcneywell Dactanst 
Seema cN 355) is the ¢Ccmmunications processor used «hroughcu 
wieeeeMCCS ccemmunity. 

The design cf the Datanet requires sufficient available 
memory tc precess message traffic; otherwise th> Datans* may 
Beeteeact the flow of traffic from the host to the network 


and f£r¢m remote sites to the host througn unsatisfactory 


SNe aes how ee be tren 


ai) 


exmcminal respons Ss 
c£ memcry allocated fcr message processing is 
mieeesectsons called tuffers. Buffsr siz 

mre yrs and number cr connections to the Data 
greater the number of connections, tha lewer the available 


Bemory and the lower the buffer size. WIN cconnecticns to 


N 


the Datanet must contend for buffer space with remote 
Peeeessors, AUTODIN connections, and tha lccal n 
Meets. 225 Dp. 2-1} 

During IVY LEAGUE 82, when the Datan¢ét became over- 


loaded, users 2xperienced up to *en second pauses for svsten 


p 


E 

Meepoens=. Scme of this wes attribucaeol2? to Datanet cver- 
Semeeecure-icn -- tco fany connections to one Datarnet. Ar 
Saeweee | «11S local terminals and the @IN cconnéecticn were 
served by the ons Datanet. In som2 casss, séveral term 
Sharec cne line into the communicaticns processor which 
Mmieener: hindered terminal response time. In addition «c the 
terminal cverloading, this same Daan v 

PUG EIN interface at all four sites reviewed. [Re 
Meme woth this Datanéet configuration, any terminal dis 
Meee 250m the System or any Detanet failure affects 
Sepmecccd terminals, Eoth local and remote. Considerin 
— mameer of terminals connected, the chance of @ Datanes 
metre Cf System Creinitialization 


( euse 
terminal cr WIN froblems is extremely high. Figure 4.1 


By 





Graphically depicts tser-dependence on the DN 355/Hest link. 
[Ref. 8: p. 3] 
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Figure 4.1 JDA Configuration. 


Mipeeng pericds of particularly bad psarforman 
meager 82, computer data cumps were take 
Datanet. JCA Datanet dumps wer2 not av u 
PoweeM configuration was considered similar to tha 
Memes? local terminals connected to the one Data 
retrieved revealed 4,490 data transfer requests t¢enied 
@@eeng 2a 17-hour period because of insuf 
Seeee. During a separate 22-hour period, an additional 


4,651 data transfers were dé 
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Space. These nusbers only tr 


Interface Messaq¢ Precessor (IMP 
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may also have occurred. During IVY LEAGUE 82 


computer received an average of 150,000 tzransacei 


O 
3 
t) 
3 
iD 
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day. Specifically, on 2 March, JDA processed 252,854 czan- 
sacticns and 87,417 transactions were processed cn 4 Maxch. 
Wet. 222 pe. 2-2 } 


Ancther hindsrance to Datanet performance was arerator 


rebocts ci the Dataneéet. Operations would frequently reini- 
tialize tke Datanet in an attempt to free blocked tereinais 
or solve WIN protl¢ems and various other abnormalizies cccur- 


ememean the netwcrk. [Ref. 22: p. 2-1] Although the 


specific impact cf these Datanet restarts were not analyzed 


meweckvicusliy affected WEN performance. For instance, the 
Joint Deployment System tranfers TPFDD files and TPFDD fils 


n jah 
memaes tC =semote sites through the WIN FTS. If a Datane 
moor SCCUIS duting ~his time, the file transfer must Ee 
recovered. Previous to zhe develo 
Fackage (RUF), transaction recovery meant file <ransfer 
mememet2alization. Now, «he JDS 
dynamically generates checkpoint O 
allow file transfer recoverv at tne pe 

Mae "WnMCCS ccmmunity enaclovs Datana 
Boeeng SOLrtware *o warn of vossible D 
Memeccr ng scttware requires approxim 
memory which further reduces the Data 


for message processing buffer 
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eeeee= included in the analysis, che no: 


cd 
ct 


Been Sxecution. f[ Ref. 22: pe. 2-1] 


E. NETWORK FRAGMENTATION 


As discussed in the previous section, the WWMCCS network 
Meamvery cusceptible to interruptions cccuriag within the 
Meee-e cl COmmunicaticns. Any network conficgusation changes, 


Semmonent cUutages, or circuit failures will cau 





Peagmen-aticn of the network into subnetworks, «hus 
fegeeeGing performance. [Ref. 22: p. 3-4} Each FWMCCS hes 
computez involved in the WWMCCS Intercompucer Yetwork is 


linked =c a Honeywell minicomputer calied an Int 


iD 


Message Processor (IMP), and the various IMPs are chen 
interconnected. 

Mersng IVY LEAGUE 82, the Network Operations Centar 
(NOC) and DCA Operations Canter (DCAOC) were relocertei «tc 
iiemecicsc hate command center, the ANMCC. To provice 
continued support fer these nedés on the WIN sudnetwork, «he 
Master IMF, normally at the Pentagon, was logically uweccn- 
mere d tc the backup facility at the Command and Cor«rcl 
Technical Center (CCTC), Reston. Changes were necess2ry 
Within the WIN subnetwork due to the backup IMp's Limita- 


feeenand Circuit availability. The majer modificatr 


b » 
O 
2) 
x, 
C3 
N 


meme ==507 Of the link ~rom ths master IMP t0 =he IAP a- 
Headguarters, Atlantic Ccmmand. As the exercise proqtesse:d, 
Mme cam]s Evident that z=he loss of this one particule: liak 


a 
Peed =c be a major factcr in nétwork iragmentaticn, 


Pere chess periods cf fragmentati 


0 


aud 


O é 
between WIN Sites was totally disrupted. [8 
Although =ne IMP and circuit outages we 


A 
eee, CCUCLEd with the major configuration changes, 
in 


i" 


everély degraded WIN performance. For 

SmmeeGCu.t OUTEgGes occured for 4 total of 5 

Gewm=time. Later in the exercise on 4 farch, a sum ioss of 

UeeeeebOurs was felt during 138 circuit outa: 

Smee we LVYY LEAGUE 82 exercise, 476 line outag 

Meet encondg O¥YE= 10 miruces, 22 of these outages wets the 

Bees Of LTegquired cryptcgraphic ksy cnanges. Xey chan 

WeLe a rtrequent cause for circuits displaced from a 

activities. IMP outages for the exercise tocztaled 334 wit! 
2 h 


weedeat. ng cvez 10 minutes: 77 at 6.63 hours cn 
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F. RESOUECF CONTENTION 


During IVY LEAGUE 82, numerous cases of ho 
misuse cccurred in areas such as primary nemo 
HommeeraOLity assignment, end imoroper inpie 
software. These conflicts severely limited the host system 
perfcrmance. The Analysis Task Force studied these pretlems 
ax the NMCC Readiness and ANMCC computes systems cnly, but 
it was felt similar situations @2xisted at numérous othsr 
WeICCS sites. Peis 22 Demet | | 

The NMCC WWMCCS site is segregated insxo two distinct 
computer systens: Readiness and Sudpo 
System is designed fe 
softwar= and other site-unigque software that has previcusly 
meeemeectessed and iS néW in production. The NMCC Suppor: 
System -s an identical configuration to the Readiness system 


eumgee Xiscts fczt the develsoment and testing cf new software. 


nly the headiness Systen participates in JCS exercises as 
MfSoULCPCrIt System centinues *o suppo Ean Open at2e7S. 
Preaoritiecs fall so that the Support Svstem may De sacrificed 
£0 mainzain the perfecrmance cf the Readiness Systen. 


Divgeoeec@ ty sly Ccteracit onal sorzwar= alicwed on =h2 NMCC 


Readiness System, the percentage of abartr2zd jobs is exsected 


memeoe small. During the exercises, the amount c£ computer 
Besources expended cr jobs which ultimarcely aborczed was 


unacceptably high. Some aborts were dus *o magneti 


number were caused by software still in the devel 
emege., | ROL. 223 p. 4-2] Prion to 2 new wAMCCS s 


4 


e 
ana Varicus cther hardware problems, putz at undesirable 
n 


O 

° 

relzase, the tempetaticn for programmers to use the Readiness 
System as a testbed for application system modific n 
high. The response time is decidedly better cn =k 
Readiness System because of decreased aports and code optin- 


izaticn. Guidelines for testing state all systems resident 
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on the Readiness system =o be tested and/or acdified will be 
a 


é, 
meametferred to the Surpert Syste Peer Vebarica=.0n with 


A 
the new WWMCCS software, the modified system will then 
et 


a Wg 
a 


replace tke old syste on tha Readiness computer. idea, 


ef course, is to preserva the Readiness computer in beth 
time and space requirements for crisis/exercise suppert and 
empicy a secend system for the heevy processing and the 
usually large spac¢ consumption cr scfiware davelorment 
Beth systems studied, the NNCC Reaiiness and the ANM¥CC 
system, suffered fror a lack cf avallaole memery fer 
eee ss nd. In particular, on 2 March memnery shortages 
severely corstrained ctrocessing Dope eS fOr a -Edve vhour 
Peeod. Under the curren= WNMCCS ADP, it is possible tc 
Gymemricailly reconfigure a system without completely bringing 
[mor e-line; or |=xampl=, allowing <h2 addicticn of neéemery to 
memes. COmMputer; system during an 2xsicise. [F[Ref. 22: p. 
H#=1)} Alzctcugqh infrequently done, mémcry may be acquired from 


Bremnrcc Surprort System to improve the perfcrmance cf the 


Readiness System. 


A standard WWMCCS proqram size 15 approximately 60K (60 
eeoz4e bytes). Any cne applicatichu: program requiring mcr: 
than €0K cr a large amount of CPU wimse, should be remodeled 
memecemciude code ocptiaizgation ang some fetnod cf memcry 
wer lays Cr paging. [Ref. 22: p. &-1] 

In addition to large mnemor mba Zetlen, nunerous jobs 
Peel. gh priorities runnin aN ened Wet, aoe Lect 


system pericrmence. Honavwell supports an urgency system 
Memeeeceter fining job ecriorities -- wurgencies may vary fren 
B25 tO 63. Typicaliy, urgéncies us 
femmeileecs 2PClica=iOn programs; f0r =xample, rouczine batch 


and TSS jobs are assigned an urgéenc eeoee slagencics abeve 


wn) 


n O 
30 are réserved for system software applications and special 
producticn runs. Uraencies higher than 50 support system 
meegtams Such as TLCE, FTS, and other WIN software. 


(Ref. 22: p. 4-2) 
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Peedicas-:cs ShO@MaDDECKi mately thirty perc 


activities processed cn the ANMCC computer system during the 
exercise had urgency levels greater than or equal +o the 
urgency levels of system Functions. oftwar2 such as ISS 
and WIN have urgéencies from 50 to 60 to allow primary access 
Pemene PLCCessor. During [IVY LEAGUE 82, this software? was 
competing with user apeolicaticn software for comouter 
resources because of unjustified high user applicaticn 


Megencacs. [Ref. 223 pi 4-1) 

mec wencCS systen consoles operatcr has the ability <o 
ecverride system prescribed urgenc u 
accomplished on a case by case basis for ad-hee orcducticn 
runs. <Any system requiring a Large block of memory, 


Siieecantial CPU time, or Lengzhy input/output processing 


will nercmaily be awarded 2 lower urgency, causing it <c 
remain in the system a relatively longer length of time. 


When the urgencies cf these systems are bumped to h 
levels, whether justified or not, they compete with 
software, usually large time-consuming systems =héemse 
ama the ‘molasses conditicn’ occurs -- total system 
down. An incrdinate amownt of automated bpookxkeenvir 
mecessary fcr oreper resource availability and the p 
becomes cverloaded. Wictmens > OOndist som OCC =S,.. Kno 
maeesninc, =~he effectiyeress cf tne Honeywell urgenc 
meonoS tO Zero. 

The cumulative affect of all the above méntioned situa- 
tions equals increased usér resoonse tine and user 
Beiscrecich. DwUring ecimal NMCC operations, TSS response 
time averages five to seven seconds; during heavy usag? 
exercises cr crises, respense time increases incrementally 
by aperoximately three seconds until total system slowdcewn 


Seculs. 





Moco cCctcwasc 2a ret always the 'viczim' of poor WIN 


performances. Some scftware, both systems software end 
Bm@eeetca-i0n systems, contributes to che increase in host 


system precessince reguirements. when these reguirements 
exceed systen capabilities, support of local and network 
coertation decreases. 
Scmé cf tae bIN system software particularly affected by 
degradéedq network performance includes: 
(1) Iecleconferencing (TLCF) System 


{zZ) Flle Transfer Service (FTS) 


(yeel= lScommMuncltaticns program (TSLNET). fRef. 22: 
Be 6-1] 
The Telzconferencing capability in WIN all usérs <=c 
Meme the cenference and raquest a transcrip: file of 


@eemens Since thet site's las= log-on. Thess files are 
pyeereec tC THe printer ata high urgency fer spe ae 
fees. «=DPirsng IVY LEAGUE 82, the Large number cf tran- 
Script file tequests severely impacced the pertcrma 

th2 syst¢n hosting the teieconference. 

iene File Troanrster Service empioyed in the WIN utilizes a 
dynamic méencry managemen= scheme to naintain an available 


Memory level déetwéeen the minimum and naxinum guideli 


ry 


ae 


The managemen = System constantly allocates and dsallccats 


" 


Beerecns Cf memory as small as 1K 0 Sustain an acceprabl 


aw 


memory level. This ccntinucus processing requirement place 


(A 


if 


mea vyy icad on the hest precessor. Aliso, during a £:il 
ne 7S reads and woiltes one Liztie Lank (LLIWRK) cf 

ewe eDO Weras. § This gamizs possible transt: 
Meamrees Ciricetiveness. (Ref. 22: p. 6=7]) 


NET uses software similazt to tne FITS mameory nanaqe- 
cow 


‘wD 
tf 


ate. Althcugh this inpos2s additional loading on 
Eee processing systen, the contribution +o system lIcadirg <s 
Wemeroretrcare as FITS Of TLCF.. [Refs 225 ps 6-1] 
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Ge JLS RESOURCE CONTENTION 


Da=ge Sscftware afrlications used over the WWMCCS 
network, such as the Joint Leployment System, need =e 
concerned abcut rescurce requirements and operational effi- 
clerncy. Since such a wide degree of diversity |¢xists among 
Seee2ea-icn systems, no guidelines for standardization cf 
new WAMCCS software have been established; therefore, these 
issues are left to the déveloping agency. For insta 
Jeint Deployment System maintains <wo i: 


tems, the JDSIP and JDSUP as part o 
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Package (RUF). The Analysis Task Force ccntends these +w 
fe) 


subsystems fail to take the best advantage 
WENCCS software features and conséequenzly generate sub 
Bees c¥eczthead for the precessor. After analysis of IV 
LEAGUE 82, the need was evident to redesign perticns c 
Meeeschtwar= to insure nore efficient voroc 
@emcad Linimization. [Ref. 22: p. 6-3] 

The operation of the JDSIP caused noticable degradaticn 


duranc the exercise. The Interface Processor subsysten 


Memeerres 28K to crocess and runs witn an utgency of 51. The 
mOSEe will remain in memory as long as it is processing 
metmeac-icns. When the vorocessor is 107 required, i.e., no 


=» 


meemecc-21cCns =o be precessed, =the JDSIP wili place its¢if in 


Mmeeotce> State’ -— degrading its urgency te zerc which 
immediately allows it to be swapped out cr the svstem at che 
Mme Gemory allocation cequest. Actually, this should be 

ay citticzent use of memory, or at isast 28K. The proklen 
@zises in waking up the JDSIP. ince =the subsystem has no 
Means of determining when the next transaction will ke 
mee-aved, =he JDSIP perziccically, about every two *c thres 
Peeeomas, rcrese=s its urgency oack to 51 which eeturns it <tc 
Memory where it can check for transactions to be processed. 
iemenO csanSections az¢ Waiting, the urgency is returned to 


meeomand the cycle repeats. (Ref. 22: p. 6-3] 
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This secheme is at its worst when JDS is rarely used on 


AY) 


given system. The JLISIP simply fluctuates from mass stcrag 


wp 


fos 


to primary memory with no advantag2. This swapping cack an 
forth creates unnecessary overhead processing and can seéri- 
cusly déecrade network performance. Casé@ in point: on 1 
Pare n, GUuring IVY LEAGUE 82, the JDSIP was swapped a tctal 
Seeeeic cases in an @ight-minuts pericd, from 1355 to 1403. 
Meet. 22: pe 6-3 } 

The JOS Update Precessor (JDSUP) poses a Sinilart situa- 
tion. The JDSUP requires only 9K tec process and runs at an 
Megency Cf£ 55. During certain processing periods, <he JDSUP 
mus= request a single block cf 50K cf memory. When thi 


reguest enters the systen, the system will immediately <x 


1D 
pay) 
ty 
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range its mémory *o0 accommodate the request from such a high 
Peo rasy jor. Usually, a system interruption is eviden«. 
Peerer che JDSUP has ccmpleted that 


ene 
t{ 


murned to memory; however, «he JD 
azely asks for another single bleck 

@eesing. [Ref. 223 p. 6-3] 

az 1 @ealleecation of ans S0K of nemory 

Sec etic he LEVY SLPAGUS Sxereice. On 
released the memerv at 
OZ eels ey Cie 
during the 0330-0340 
6 


H. MANAGEMENT OF COMPUTER OPERATIONS 


Bieadg ff LEAGUE 82, 2t becage eviden= that hardware 
and scftwars proktlems were neot~ entirely responsible fier the 
stem degqradaticrn. The overail management and control 


of 
Memone Be<work and hest system also contributed =o deficient 
SC 
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fomeare OLetne fermalyo@berazions Of all WIN sites, hard- 
ch as the host computer systen, the Datanet, and ~he 
MPS are reinitialized in an attempt to sclve various tercb 
lems. These rebcots interrupt network performance end can 
impact lecal user drat dake. ue ddicesOn wen ux p 


= 
down time and reboots, scheduled outages occur at all sites. 


The WWMCCS community has ne standard guidelinés for the 
schedulina cf these cutages. Yreéequenctly, these unscheduled 
Gewmr anes are noz justified; for instance, during the exer- 
cise, a Datanect was rebooted *o aiiow a single user accéss 
emer farticulat system for a local processing requirement. 


This reboct affected all users on chat subnetwork. 
ees Match, th= ANMCC discontinued service <9 remote 
users b¢ecause of an apparent memory Shortage problem. 
Meeerditg tc VIDEO, an online display systen which alicws 
monitcring cf system status, minimum work was being 
processed because of a lack of availabls nemory. The after 
exercis: analysis however, revealed approximately 150K o 
Memory available during «hat time frame. The discrepancy 
le 


Eeeurred due tc imprcper us 


(i) 
oO 
th 
ct 
J 
D 
< 
rt 
Oo 
tr 
Oo 
(A 
O ’& 
{A 
ct 
iD 


u 

syst¢m is designed tec provide an instantane 
System curces The system was ii:kely rTsstrtuct 
ry tc accommcdazée tha increased w d 
Mocmiadeeso detach all remote ussts. [ Ref. 22: 
Ane=her opsrational contribution <t0 poor netwo 
Meme = cccurred when FTS was used to tra 

Within =the same site, as opposed to using 
Meansetecting a file with sending a 2 
fied as the same site, Sands the file to the 
imméediazely returns the file to the sam2 host. D 
LEAGUE 8&2, 2xercise statistics showed that 34% of 
transfers at the NMCC were same-sSit? “*ransrters, as were 67% 
Seieticary Airiirt Ccmmand (MAC) transters and 83% az the 


Meme@e@s site Ssuppcrtirg the Ccommander-in-Chief, Naval forces 
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mueeme. [Ref. 22: p. 5-3] This type of ftwee.ondl AMasiee 


wastes hest system resources and contributes to WIN era eter. 





V. RECOKMENDATIONS AND CONCLUSIONS 


When the current WWMNCCS/WIN management problems are 


addzessed during the modernization phase, network perfcr- 
Meee Shculd :mpzove. This will decrease user frustration, 


especially during high volume times, and increase weer 


@eeeyvity ch the system. This increase in volume in ¢ 


ilies al F 
may affect system performance and, with greater user rarti- 
Cipaticn comes additicnal sit¢-unigqgue software. Site¢e-unique 


applicaticns are creatéd due to deficiencies within the 


system which will always exist in a system as large as 


Meeecsce The WIS modernization plan does not propose oa 


¥ 


mmeeeeNace this uniques category of WWMCCS software, just 


[mee mize its preporticn *c standard software. 


Poe OCF IWARE 


Mie WLS MOdernization plan includes a new operating 
system release, GCOS 8.0, and a modified Honevwell main- 


Beame, che H6000 Distributed Processing System (DPS). 
The majcr sottwar¢e modifications include: 

(1)improved cata nanagement and timesharing 
rrocessirg 
(ieee owisO cawe> 2 WE2= cen) anwa haga onder languaqe 
which facilitates maintenance NO 
(3) increased number of timesharindg users frem 290 
=c 600 
(4) increased number c 
mono itm Ref. 23 ] 


Not mentioned in the WIS modernization plan is any iust- 
Sad 


tt 


concurrent processes f£rem 64 


Penectaemonts 2hersase im possible user activity will 


a 
not further degrade system performance. Although a new 
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Processor is under ccnsideration, =h2 H6000 DPS acditica- 


mee, a Significant increase in processing cavabilicy is 


3 
software. Increasing the number of time sharing user: 
three-fold will cuickly comsume any available proc 
time. 

The WHMCCS mcdernization plan also includes the i@4 
software package for retter file managément, allowing diffse- 
ements le structures fer files in the same data base, ard arn 
mmmemecea DBMS, the Integrated Data Stores II (IDS II}. With 
the current IDS I, the progammer is not independent cf the 
data kase¢ -- one of the fundamental requirements of e Data 
Pas? Management System. Wnen using IDS I, the user must 
krow the data base layout, referred to as the schema, and 
Miece include various system coutines to succ re 
the data kase. IDS II will be mor] of a 
use= independence from the data base schema. 
With a true DBMS, more users are 
eS 


a 
tained within the system, thus in 


Nemec)! CCT, GSeaomleg {S25 
retrievals irom Mee Sites, Wees, [Str isval requsste fzcis 
the JCS, anc increasing data transfers on WIN. Again, the 
WES mod2rnization plan lacks an apoarent Knowledge cf acw to 
Mamadie this increase in activity. 
Meeeneugn the basic software design ort the WHMCCS #quir- 
n 


Bete is cnadequats fer a Multi-Lavel Security (MLS} systea, 
mer] has been a propesal using hatdware nodirficaticns. 
Honeywell has deveslorea a system, the Honeyweli Secures 
meamunicaticons Processor (SCOMP), which runs on the 
Honsywell Level 6 minicomputer and is billed as 2 MLS 
Eyeecem. SCOMP utilizes four rings Oo 

Pemnel residing in Ring O,and the least priviledged rizg, 
meeeag 3, belcnging te the users. Bur SCOMD elso modifies ths 
hardware Ey suoplying a hardware segment 


a 
mearod?’ng Main memory into distinct Legical 
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@gees. This shculd allow access checking cer segment fer 
meeaywcite Eriviledges, thus maintaining eontrolled software 
sharing among many users. (Ref. 24:3 p. 43 

While SCCMP has not been fully validated hy the 
Memeurte= Security Center, part of the Natio 
Agency (NSA), it is censidered a large step towards 
ecurée, cime-shared ccompicrer resources needed in ccmmunities 
Such as the WHMCCS ccmmunity. In December 191, the 
peeing y Center published a Product Evaluatio 
S@ecatying that SCOME "... should be considered 

c 


table candidate for a wid2 range of min: 
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e@oeica-ions which requ 
Se 


Ssuppcrt secure processing regquiren 


iD 
Sy 


A 
& 

Risen ne ee | 
Meeaner emerging alternative is =he BLACKER Techrolcgy. 
Seem ER Will supply end-to-end encryotion through the 


ELACKER Terminal Access System (TAS). This fAS is a PDP 
11/70 ot PDE 11/34 and acts as u 


RY) 
i 


Sfer between the network 
femec=s= COMpUtets fez security yerificazicn. Upon Icg-cn 
is 


each user will bs assigned a one time key for ¢ 


YS 

fied E¢sfere access +c each data bas is 2liowed. They will 

mimeome> USed =O cCOontrcl inadvercient mnisrcutine of Rata, 

meeorred to aS spillage. [ Ref. 26: p. 6] 
iiemianetaeasschend ene BLACKER scrotozye> is tc allev- 

date the burden cf nrmezrous passwords for each user per each 


1 


Mes. conrutec. Passwords are no longer considered secures 
b 


£0r scme classificaticn leveis because they must be stcred 
ioaen =<he COMDUtTEr SyStem and users f[regquenztiy violate 
meeictity pf~recedures ty ee Buetow sone Gi the ncs< 
viable alternatives proposed has been =the usé of magnetic 
strip identification tadges and elsctronic padge readers. 


This systsm would allcw for minimum manual in 
(Ref. 26: p. 17] 
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Peco ss yStem would allow qhe Joint Depl 
Semecec! access tc varicus capabilities in s 
Fresently, all host computers and personnel a 
to the highest security ievel of any piece of data ccntained 
moe. ne OFLAN. 

MimMerloning Withcut a NLS system, tuli utilizaticn cf 


WHWMCCS resources is improbable and the sharing cf computer 


Mesources over the network 2s restricted. During the 
interim E¢etween the feresent securisy voroczedures and the 
eventual cevelopment cf a MLS system for WWMCCS, the WIS JPM 


Li 
i[meeomes the central WWMCCS security officer +9 sztandardizs 
physical security preccedures and set guid: iD 


Memalang cf different security levels on < 


B. HABDWARE 


ess the issue of 


mee WIS modatnization olan 


SOs t- oe wend SUDDOL[., 2%. 2.,; 


d 8 
Mmemmndart pcwer supplies. The vulnerability of computer 
hardware to slectric powar foro 
ft 


femmceNdit2cning, is immense. With yery Few WNMCCS nodes 
Meayeng a reiztable backup power scurcse, tre netwerk should 
not be censidered survivable. 

Tnciuded in the réear-term YIS nodernization program is 
eee procurement of *~he Honeywell 600 Distributed Precessin 
Meeceenm (DES) moditication. The H6900 oPS offers majer har 
War2 and software improvements over =zhe H6060 and 46080 

mnu 


Seemed: Curren=ly used in <hs WaMCCS community. “ajer 


hardware changes inciude: 
(1) 70% to 90% 


(Ase ac=, DGWEE, and ai =-conhdi ci: Oning requirenent 


ncreased processing speed 


~educt ions 


iD 
th 
O 
| 


(eit Scee-F ing artchiteccur Wiesrsyeren pessi- 


bility [Ref. 23] 
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The Hecneywell mainframes presently used are fast 
appecaching the age cf computer antiquity. The largest 
h 


on 
QO 
28 fs 
a 
9) 


rrobiem centers around the Hor. i ceCtie ou wh 2 s 
Merce signed £6 supocrt an online, interactive envircnment. 
iderad, the WWMCCS host 


When hardware replacement ie cons 
computers should be replaced with co 


=) 


puter systems desianed 
Memourport a ~eal-time, online, interactive environment. 

Phe charging requirsments for network software, movin 
this software onto the Datanet processors, and advancements 


in computer technolcgy have all reduced the mainframe 


requirements for most WAMCCS sites, For hardware acgui 
mmeomy WHWMCCS sites will consider a sériess of minicomputers, 
for ins zance the Honeywell Level 6 ninicomputéers, versus cns 


would ba unique in 


tn 

}- 
é 
, 


Zarge machine. Of ccurse, #ach 


Semriguraticn but a typical WWMCCS site could employ cna 
u 


Mevel™o6 for each of the follewing functions: tne AUTCLIN 
Meee ge processing, <he WEN cennection to includ= hardiing 
Mme cucppcrt, the ADELO functions, and all resident daza 
bases and lecal processing requiremencs. 


C. CCMSUNICATIONS PROCESSOR 


hee wwMCCS CenMunity has communications processcr acni- 
memend sctitware which consumes 2,500 words of 
when implemented but can supp 
Patane+ cverload situations a 
femereer= Ng Software for the Datanet 2s not ar 


Ben sites, but each sits si 


S 
u 

message processing cr th2 number of tr 
Q m 


an acceptable level. If me 
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supplied las pmGuie1s/OXere.Se Situation for the aoni- 
eomemeg Sscttwars, controlled simulaticns using the Detanec 
sorttware shoud be implemented to forecas+ poten- 


tially ¢threateni Scrasweonvanes sous =o the Datan¢e=. 


a 
To) 
+ 


ih 
fu 


A set of standard system guidelines should be develop 
for us¢ at ail WIN sites to establish acceptable criteria 


Bemeuacenct reboots. Frequent rebooting as a first ¢t 


4 
~a4 
eu 
ct 


Pemevang 2 hetwork zrcblem shculd be discouraged. 


Also, a WIN softwar 


(D 


validation package should be dé¢vel- 


Mmeemmece prohibit file transfers within the same sit 


MD 


Op) 


Included sheuld te installation checks to insure WHMCC 
Standard System Saftwars is installed properly and site 
Seerecns are set at tbe prescribed isvel. [Ref. 22: pe 7-4] 
The Datanet ocverconfiguration problem, i.#., 115 =ermi- 
Hemesedinked to one Detanet at JDA, iends itself to «wo 
Mememriendaticns. The €.2st solution is Simple but rather 
expensive -- prc¢ccure nore Honeywell Dacane 
Heesiliy, this would allow one Datanet to be dedicated + 
Ss WEN ComerGtion. This CORE: guration would reduce 
D 2 


= 
WIN prcbléems associated with cpoerator ri 


OGr~s Of 22S Dazanes 

Semeeteve LCN-Winsprocriems. [Ref. 223 Dp. 2-2] With addi- 
mmomal Datanets, user loai cculd be better distsibuteid and 
Datanet tailurzs would have less impact on the site perior- 
Mance. A+ a mininum, sites should avoid iinking high veclume 
Semmect2cns such aS kIN, AUTODIN, and =ne JCS ADP Liason 
mercer (ADELQO) terminals on the same Dactanet. In additicn, 
Sites shculd adhere tc the standard WWMCCS loading levels 
for «he Catanet as directed by zhe WWMCCS ADP Advisory 
Memorandum (WAAM). 

The seccnd recommendation is to eliminat2? the Honeywell 
communications processor equipment and trensfer chese func- 


h 
Seos <c_=her +o ancther vendor commuricaticns processor or 
n 


tO a Minicomputer, such as the Honeywsli Level 6 miniccn- 
Mieect. ithe Honeywell Dazenet 355 is limited in 2 memory 
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Sagem eich if no longer sufficient for the normal meesage 
PFLrOcessing capacity az lacge WIN sites. Using the Lavel 6 
Minicomputer in series woild alleviate the paces sechlen 
ama crovide additional processing Re che iho esos. 


De. NETWORK FRAGMENTATION 


To prevent the tecccurrence of problems simila: n 
cnes caused by the Master IMP being recon red during IVY 
LEAGUE 32, conz=Aingency plans shouid bs devis 


mM 
the drastic configuration changes as ware necessary when 
such a targetable IM? was deleted from the network. Studies 
and crisis/exercise gcnitoring should be undertezken to 
Mmeeates ECSsible circuit or IMP links which Wikd.. ie esa 


mewonk coagmentation. f[Ref. 22: p. 3-9] AEter identiftyirg 
areas, they shculd ba reinforced during high vclume 
emecy Tedundarc Cenrtiguration or speciztic rerouting 
ee Ae eowieoh WUGsage, Pabic Of the WANCCS moder- 
2 


[ay - 
an, LMP ged Circuit outages should decrease. Th 


iD 


Becimewl i ieomevlide =andem DroCcess=rg ©f up to 300 
Peewee t= Cer second, fcr a total of 900 packets béing 
@. HonMige@wa and reroucing will b= eccemol 

eeeapeive crouting elqcrithns which will rerou 
Beemets to =he shortest path. In additicn, neo a 
Meerec! £UNCtiIONS aré included to provid= fault isolation 
and hardwart and softwar2 problem diagnosis. 

Pegedcing tne huge WWMCCS network with a series cf Local 


Neztworks (LANS) will alieviat2 some cf the degradation 


th 
w 
te ww 
ch pb 


miei retwerk fragmentation. Moving the nerwork soft- 


=x 
ey) 
Hy 
(D 


from the Honeywell mainframes onto «he Datansts is tne 

mens: S.6€p in building independent LANs. EV 

netwerk secftware should pe moved, alleviating the mainframe 
mn 


meOm any netweark conticl 7 rr 
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Maye the TEStraceicn for standard hardwa 
Sites. With no standard hardware limitations, 
tailor the acquisition of new hardware arou 
requirements, Since all host systems will be linked +hrough 
Smeommch Letwork, Minimum compatibility problems shkeuld 5b 


experienced. 


Ee. RESOURCE CONTENTION 


One perular recommendation ror the nainframe processor 
Meee ntlon problem is the addition of another proc 

fmeeenCC Seadiness System. This additional processor would 
Mm—meietetficd duxzing an exercise but noz fully utilized 

Mr nd daily operaticns. 


memerpessd {eC precuring an additional processor, “he 


Pereocao. Sv¥S ten cculd be modified to temporarily provid: the 
necessary hardware/scftwar2 equipment during crisis/¢xerciss 
Peeedaticni:. The mair advantag= to this plan is teduced 

memereecG 302 CPU contention. [Ref. 22: p. 8-3] The validity 
Gb 7n2s Flan is somewhat questionable. Previous to the NCC 


Meo. CCiiputer system division into’ Readiness and Supper: 
systems, there was a H6080 machine with two processors 
@emceution =eached a level to warranz the sevaraticon cf 
Beoagucticr and develcpmert efforts, thus was botn ancther 
@E syst]m strictly for developmental erforts. 
Confiauraticn now stands at «two separate systems w 
processor ¢ach. AS wéentioned in a previous section, users 
do not always respect the guidelines for usé h 
eyecegs. Ia light of user-induced problems a e 
performance, stronger enforcemerts of implemented 


would b= more cost-2ffective. The recommen 
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iw 6k 
mh 
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i 


additional processcer is expensive whethe 
Beene actually procuring ancther processor which 


EUliy utilized only akout twenty-five percent of the time or 
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Gme Support System scftware is used for high-priority usage. 
During the later opticn, numerous software development 
Beesornei with no planned participation in a crisis/exercise 
envircnment, would be without a computer precessor which 
greatly restricts their developmental efforts. 

Also hirdering processor performance is the Honeywell 
urgency scheme fer precesses. The basic idea of «he 
Honeywell urgency schéme is acceptable. The urgency schene 
needs adjusting and the implementation should be modified 


meecighter controls cn the system consol? operator! 


in 


ability «tc cverride tie system d2fault urgencies. Also, 
enhancements +o prohibit application software from r2aching 
urgencies in the WIN sceftware level is nécessary. This 
would discourage rescurce competition and improve system 
Slowdewn. One urgency system recommended incluced ne 
meerowing any applicaticn software to exceed an urgency cr 
10. Few users, mostly system progrtammars, woulc operate ar 
urgencies cf 30 to 40 and no users would exceed 40. This 
rropcsal leaves urgenci2s of 40 to 63 for system software 
and WIN software. 

Mere WetSS Monhitcr has been developed within the WWMCCS 
@emmunity. This mecniterinag software is easy to = 
System console commands and no system 12 
meeeced. Unfcrtunately, this new Monitor w t op 
momen vY LEAGUE 82: but it can be utilized during =he ne 
exercise for selected small periods of time *o @llo 
mmo ough analysis of slowdown periods. [Ref. 22: p 
Meemeeci= WLS modernization plan, the capability =o monit 
€ach network 2lement is achieved through the Monitoring 
Mea2ers cf the DEN. DDN will also provide an automatic 
Bete ==COGnhiteon and isolation for trouble spots with most 


reconfigurations being handled without dedicated personnel. 





WIN software, such as the memory management algoziczhmse 
for FIS and TELNET, should be radéesigned to reduce the allo- 
cation and deallocation processing for memory. Ore 


altexznative could be a minimum size of mamory allow 


oy 
ct 
p 
fu a 
te 
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allocation, this would aliminate the overhead gener 
the sSwafring of 1K. 

Additicnally, improved operationel procedures are needed 
Gemeething teleccnferencing transcrip: files. Options aveai- 
table include: 

Merc piccemr dete) DG =r -Sd OUTOUcC Witch @ lowe> urgency 


) 


Simenewecwba  fOrece printing a= less critical tises 


(2 wieenowleng ELI Neng OF the transcript file 
equests only during scheduled time periods 
fen teScurce contention problen, especially at <he NMCC, 
Memeeeee> Od aS 4 top priority of zhe WIS modernization plan; 
however, ne tangible alternatives nave been propesec. 


Fe JDS HESCURCE CONTENTION 


: 


The memcry chasing problems or the JDSIP end JDSUP 
subsystems may be aoproached from several alternatives. 
Obviously, the asount of allocation/deallocaticn depends 
memos cntitrely on the idle-time of the subsystem. Studies 


Seema be conducted at each sits A ick he Rene-= 


Werrere Packace (RUP) to determin= its use/idie ratio. If 
the JCSIE subsystem remains in nemory the majority cz the 
“ime, tinimum overhead is generated. If the JDSIP useyidis 
Sae2O iS Stall, Significant overhead will be generated ry 


the subsyster changing urgencias to engage placement in ccre 
mmeeene Crane= of checking for *«ransacticn activ An 
alternative would be the development of a small check- 
SBOucine tc permanently reside in primarty memory. SSP Jeo 
Megtd be =O periodically, every =wo to three seconds, check 


meee TcetT. 1d transactions and change the JDSIP urgency *o 51 
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Neate 


NS are available for processing, at che same 
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BI eOn i USgdency tO Zero... This would produce a 
Phe-b S~ate Siniiar to that of the JDSIP when inactive, only 


mmemeGcneck-rtCutr> ne would not leave cora. when the JDSIPE 


: 


finished the necessry transaction processing, i+ weuld 
G@Ssereaess its ufgency to zero and change the check-routine 
urgency tc 51. This would allew the JDSIP to be swapp2d to 
Mass storaqe 2t the next memory reguest and che check- 
EOutine would have high priority for processor time and 
Besume waiting for the next transaction. 

Ancther alternative to be consid¢ered is the permanent 
Meemetodt 2. On cr 2Z8X to the JDSIP. This woulc allow th 
permanen+ resicderce in primary memory and is f4a 
host system is not memcry-restrictad. 

The JCSUEF subsystem ramains in primary memory itself ax 
u Caden eveescdila=s Son additaon o0K 2<O= processing. 
oroblem cencerning the JDSUP memory allocation 
memecer ~ne J°SUP Tequiting one single block of SOK cé 
memory. Generaily, the system must rearrange memory <tc 
peeeewe CONt ge ous SOK biock. The easiest soluzticn weuld 


< 
be che p2zrmanen* attiachment of the 50K to the JDSUF 
Y 


Supsystem. For 2 System memory-restricted at ali, this 
alternative is impractical. A mor2 feasible alternative 
meea 0 ~O include SOK in the system Size for the JDSUP and 
Meeat che S9K as one system. Then medity the JDSUP to 
Meenede Of MasSS StoOarg2 and utilize a check-routine, Similar 
m@emene JLSIE, Est ee GWeew A0NcCe epeGgucze=smen=s. The 


Same urgercy svacping and processing schemes could be 


feels zed. 


pv) 


imc OG tOnmrco the Svecitic moditicacions to the JLS 
subsystem, several other measures could be taken te ime 
WIN réscurce Tagquir2mencs 

(Qeecevelopnent cE Standards for new applicaticn 


ecfitware 


is 





(eer com dare seu ter aa fOr Lrescurce Fequiszemer=s in 
new software 

(3) code optimization and memory overlays for léztger 
systems 


Cuter iZomtoneef data ceompressi 


O 
(SJeeoeeved Anput/OUcDUt 2aterfac 
(6) more efficient data «=ransactio 

n 


WyeclhamM=enaticn Of large daca t>a 


G. CCNCLUSICNS 


Cne of the Largest problems with the Defense Dara 


Meeweork (DDN) will be the Multi-Level Security issue. With 
Smemeyvaritty of users linked through one common network, a 


YLS system will Fe imrerative. 
Anctaer DDN concern is the standard data communications 
Memmeccli=. These prctocols should net only interface with 


mre 4UWMCICS sites, but should be able to interact with NATO 


Systems ior greater iIntercoesrability. The WIS JOM presently 
Meeedd= tc réegquirs standard protocols be written in the new 
CO} déesiszr language, ADA. While no ADA compiter has been 

G aS meeting all DOD standards, the ster 


rdard software should bagin 4* soitware 


Mem iS modernizetion olan will bring nodern software 
ang leter hardware irto the WWMHCCS community. The WIS JPM 
Bemeegyels <a tackle the scftwazre probiems in WWHCCS first 
and bycvass the fast ocving technology £1 


= 
Mees.) later. Not all of zthe WWMCCS standard sottware needs 


Beweeto2ng and by modernizing <he software fisst, the #NNCCS 
network will pecome more adept to present day requirements. 


1p 
WHMCCS ADP problems will not be solved by the WIS mcder- 
MaZat~icn plan or hardware changes alone. The WWMCCS 
O 


computer systems ar2 used for war-gqaming and s 
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MevelCement but the primary intention of ¢ 
surfaces during crisés with the handling of o 
The heart of the WWMCCS ADP program must be a fa 
and secure transacticn processing system. Faster reuting 
algorithms rust te develcped and improved physical surviv- 
moeeeety iS Critical. Now, every node on the WNHMCCS network 
is vulnerable to easy destruction and é4ach node lost has a 
Teat inpact on total system performance. 
Prewwls MOdernization plan with an improved DEMS, 

management and security procedures, and user interface is a 
GeOmewiNGCS, 9 Ph<e 


Significant start towards «he remodeli 
ye pened senda Tea ]er 


modernizaticn is planned over a ten 
ceoncern will be maintaining services do 
Mee Joint Derloymer= System will ca@rcainly benefit fren 
Sere WIS gcdemization plan. But the areas of network 
Management, multi-level security, and resour 
must be addressed by «he modezrnizatio 
Peepcsed. In the meantime, the Joins Den 
Gontinus to develop J@S-unigque softwa 
@epecili*ics and orovide depnlovmer: infor 


Serpe ts situations. 
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